Information disclosure via SMB client over-read

Information disclosure in Windows SMB Client in Microsoft Windows allows remote attackers to read memory contents via crafted SMB responses. Microsoft has disclosed only that the SMB client performs an out-of-bounds read while parsing network data; the specific code path and field handling error remain undisclosed. Exposure requires a Windows host to initiate or process an SMB session with attacker-controlled content, and the stated impact is limited to disclosure of memory data rather than modification or service interruption.