FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)

FreeRDP is an open source implementation of the Remote Desktop Protocol (RDP) from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrush_decompress function when handling untrusted input. A remote attacker could exploit the vulnerability to execute arbitrary code on the system or cause a denial of service attack.