CVE-2019-1245

MEDIUM

Windows DirectWrite - Information Disclosure via Memory Exposure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-1245. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a memory corruption vulnerability in Microsoft DirectWrite (DWrite.dll) via a malformed OpenType font. The PoC triggers an invalid memory read in DWrite!SplicePixel, leading to a crash and potential information disclosure.

Description

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/47381

This exploit demonstrates a memory corruption vulnerability in Microsoft DirectWrite (DWrite.dll) via a malformed OpenType font. The PoC triggers an invalid memory read in DWrite!SplicePixel, leading to a crash and potential information disclosure.

Classification
Working Poc 90%
Attack Type
Dos | Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Microsoft DirectWrite (DWrite.dll) on Windows 7 and Windows 10 1709
No auth needed
Prerequisites: Ability to deliver a malformed OpenType font to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.1206
EPSS Percentile 95.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (18)
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1703
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
... and 8 more
Published Sep 11, 2019
Tracked Since Feb 18, 2026