CVE-2018-8786

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4

Description The issue is caused by an integer truncation leading to a heap-based buffer overflow in the update read bitmap update() function, resulting in memory corruption and potentially allowing remote code execution. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For versions prior to 2.0.0-rc4, update to version 2.0.0-rc4 or later to resolve the issue. As a temporary workaround, consider disabling the update read bitmap update() function until a patch is available.