FreeRDP nsc_rle_decompress_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from a failure to check whether context-+greater-than+Planes contains data of sufficient length when processing it in the...

FreeRDP Input Validation Error Vulnerability (CNVD-2023-72252)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that originates when insufficient blockLen is provided and proper length validation is not performed, which can be exploited by an attack...

Google Chrome < 116.0.5845.179 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 116.0.5845.179. It is, therefore, affected by multiple vulnerabilities as referenced in the 202309stable-channel-update-for-desktop advisory. - Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

nftables oob read/write exploit CVE-2023-35001 Exploit used...

FreeRDP RleDecompress Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol by the FreeRDP team. FreeRDP RleDecompress suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the application and cause a denial of service attac...

The vulnerability of the ncrush_decompress() function in the RDP client of FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the ncrushdecompress function in the RDP client of FreeRDP is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Zoom Desktop for Windows video conferencing software for clients relates to the use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

Vulnerability of the gdi_CreateSurface() function in RDP clients of FreeRDP, allowing attackers to cause service interruptions

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the gdi_multi_opaque_rect() function in the RDP client of FreeRDP, which allows a intruder to cause a service failure.

The vulnerability of the gdimultiopaquerect function in the RDP client FreeRDP is related to the operation of writing data beyond the buffer boundaries when processing the multiopaquerect-numRectangles parameter. Exploiting this vulnerability can allow a remote attacker to cause service failure...

PT-2023-21830 · Qualcomm · Qualcomm Fastconnect 6800

Name of the Vulnerable Software and Affected Versions: Qualcomm FastConnect 6800 affected versions not specified Description: The issue is related to memory corruption in WLAN Firmware when parsing received GTK Keys in GTK KDE. This can potentially lead to security concerns. The severity of this...

The vulnerability of the nsc_rle_decompress_data() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the nscrledecompressdata function in the RDP client FreeRDP is related to the issue where the operation exits outside the buffer in memory when processing the context-Planes parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures remotel...

Vulnerability of the RDPGFX_CMDID_RESETGRAPHICS() function in the RDP client FreeRDP, which allows a intruder to cause a service failure or exert other effects

The vulnerability of the RDPGFXCMDIDRESETGRAPHICS function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other adverse effects...

The vulnerability of the general_YUV444ToRGB_8u_P3AC4R_BGRX() function in the RDP client FreeRDP, which allows a intruder to trigger a service failure.

The vulnerability of the generalYUV444ToRGB8uP3AC4RBGRX function in the RDP client FreeRDP is related to the operation that occurs outside the buffer boundaries in memory when processing the variable pSrc. Exploiting this vulnerability can allow a malicious actor to cause service failures remotel...

Vulnerability of the progressive_decompress() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the progressivedecompress function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer in memory when processing nXSrc and nYSrc. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE CVE-2023-39352

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

SUSE CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

SUSE CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

SUSE CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

SUSE CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

CVE-2023-40181

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...