This vulnerability (CVE-2025-21341) involves an out-of-bounds read (CWE-125) in the Windows Digital Media component of Microsoft Windows 10 Version 1507 (build 10.0.10240.0). The flaw could be exploited by an attacker with local privileges to elevate their privileges on the affected system. The CVSS v3.1 base score is 6.6, with attack vector requiring physical access (AV:P), low attack complexity (AC:L), and low privileges (PR:L). The vulnerability impacts confidentiality, integrity, and availability (all high). Microsoft has published an official fix to address this issue.

Successful exploitation of this vulnerability could allow an attacker with local access and low privileges to read memory out-of-bounds, potentially leading to elevation of privilege. This could result in full compromise of the affected system's confidentiality, integrity, and availability. There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1507 (build 10.0.10240.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21341. Applying this patch will remediate the vulnerability.