Microsoft GDI+ suffers from an out-of-bounds read in DIB palette handling in ValidateBitmapInfo. Continue reading...