CVE-2020-11096

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.2

Description The issue is related to a global out-of-bounds (OOB) read in the update read cache bitmap v3 order function. This allows a remote attacker to access confidential data and potentially cause a denial of service.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 to resolve the issue. As a temporary workaround, consider disabling the bitmap cache with the -bitmap-cache option (which is default).