PT-2026-7036 · Freerdp+3 · Freerdp+3
CVSS v2.0
9.4
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.22.0
Description
FreeRDP, a Remote Desktop Protocol implementation, contains a flaw in the ecam encoder compress h264 component. The component does not properly validate the source buffer size and relies on dimensions provided by the server, resulting in a potential out-of-bounds read when using the sws scale function.
Recommendations
Update to version 3.22.0 or later.
Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp
Linuxmint
Red Os
Ubuntu