Astra Linux – vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the ClearCodec band decode path; this happened when crafted band coordinates allowed writes beyond the end of the destination surface buffer. A malicious server...