CVE-2023-40576

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.0.0-beta3

Description The issue is related to an Out-Of-Bounds Read in the RleDecompress function. This occurs because FreeRDP processes the pbSrcBuffer variable without checking if it contains data of sufficient length. Insufficient data in the pbSrcBuffer variable may cause errors or crashes. The issue can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later to address the issue. As a temporary workaround, consider restricting access to the RleDecompress function until a patch is available. There are no known workarounds for this issue.