PT-2026-92073 · Freerdp+1 · Freerdp+1
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.31.0
Description
A null pointer dereference occurs in the
gdi surface bits function when processing Surface Bits commands that use the NSCodec codec ID. A malicious RDP server can cause a client crash by sending a specially crafted Surface Bits command that claims to use NSCodec, regardless of whether the codec is disabled.Recommendations
Update to version 3.31.0 or later.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp
Ubuntu