Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
CWE-125