Advantech printer driver: heap corruption via Monochrome blit function (DrvRender_x64_ADVANTECH.dll)
Heap corruption in the Advantech TP-3250 printer driver due to 32-bit size arithmetic and unvalidated geometry in a CopyBits-style routine; reliable crash and likely local Privilege Escalation.