Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.
CWE-908