CVE-2023-40186

An integer overflow vulnerability was found in the gdiCreateSurface function in FreeRDP, which may result in a crash...

CVE-2023-39355

A flaw was found in FreeRDP. If context-maxPlaneSize is 0, context-planesBuffer will be freed. However, without updating context-planesBuffer, this may result in a use-after-free problem, leading to a crash...

CVE-2023-40567

A flaw was found in FreeRDP. Improper validation in the cleardecompressbandsdata function may allow for an out-of-bounds write, resulting in a crash...

CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

CVE-2023-39352

A flaw was found in FreeRDP. An out-of-bounds write may occur when the values rect-left and rect-top are exactly equal to surface-width and surface-height. eg. rect-left == surface-width && rect-top == surface-height. This issue can result in a crash...

CVE-2023-40187

A use-after-free flaw was found in FreeRDP. This issue occurs in the avc420ensurebuffer and avc444ensurebuffer functions, which may result in a crash...

CVE-2023-39353

A flaw was found in FreeRDP. In the libfreerdp/codec/rfx.c file, there is no offset validation in tile-quantIdxY, tile-quantIdxCb, and tile-quantIdxCr. As a result, crafted input can lead to an out-of-bounds read, which may result in a crash...

CVE-2023-39354

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context-Planes without checking if it contains da...

CVE-2023-39350

A flaw was found in FreeRDP. When an insufficient blockLen value is provided and proper length validation is not performed, an Integer Underflow can occur, leading to a Denial of Service DOS...

CVE-2023-39351

A flaw was found in FreeRDP. If the initialization process of tiles is incomplete, for various reasons, tiles will have a NULL pointer. This can be accessed in further processing, causing a program crash...

FreeRDP general_YUV444ToRGB_8u_P3AC4R_BGRX Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...

FreeRDP general_LumaToYUV444 function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the generalLumaToYUV444 function processing on the in variable without checking if it contains data of sufficient length. An...

FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrushdecompress function when handling untrusted input. A remote attacker could exploit the...

FreeRDP progressive_decompress function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the miscalculation of the nXSrc and nYSrc variables in the progressivedecompress function. An attacker could exploit this...

FreeRDP Null Pointer Reference Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a null pointer reference vulnerability, which stems from the fact that in some special cases, the initialization process of tiles is not completed and tiles will have a NULL...

FreeRDP nsc_rle_decompress_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from a failure to check whether context-+greater-than+Planes contains data of sufficient length when processing it in the...

FreeRDP Input Validation Error Vulnerability (CNVD-2023-72252)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that originates when insufficient blockLen is provided and proper length validation is not performed, which can be exploited by an attack...

FreeRDP clear_decompress_bands_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the cleardecompressbandsdata function having no offset validation. An attacker could exploit this vulnerability to cause a denial...

The vulnerability of the general_LumaToYUV444() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the generalLumaToYUV444 function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer boundaries during the processing of the in variable. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability of the RleDecompress() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the RleDecompress function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer boundaries in memory when processing the variable pbSrcBuffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...