Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
CWE-125