Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft · DirectX
Date added (CISA)
2026-05-20
Remediation due
2026-06-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.