Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CWE-126