Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CWE-125, CWE-843