CVE-2023-40574

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.0.0-beta3

Description The issue is related to an Out-Of-Bounds Write in the writePixelBGRX function of the FreeRDP client, which is caused by incorrect calculations of the nHeight and srcStep variables. This can allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later to resolve the issue. As a temporary workaround, consider restricting access to the writePixelBGRX function until a patch is applied. However, since an upgrade is available, this should be the preferred course of action.