CVE-2023-40569

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the progressivedecompress function. This issue is likely down to incorrect calculations of the nXSrc and nYSrc variables. This issue h...

Integer overflow

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

Out-of-bounds

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

CVE-2023-40569

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the progressivedecompress function. This issue is likely down to incorrect calculations of the nXSrc and nYSrc variables. This issue h...

CVE-2023-40569

FreeRDP (RDP client/server library) has an Out-of-Bounds Write in progressive_decompress caused by miscalculation of nXSrc/nYSrc. Affected releases require upgrade; fixed in versions 2.11.0 and 3.0.0-beta3. Impact trained as potential crashes; no public exploit details in provided docs. Remediati...

CVE-2023-40574

CVE-2023-40574 affects FreeRDP (RDP client library). The vulnerability is an Out-Of-Bounds Write in the function writePixelBGRX, likely caused by incorrect calculations of nHeight and srcStep. Impact is described as a crash/harmful write with high severity. The issue has been addressed in FreeRDP...

CVE-2023-40576 Out-Of-Bounds Read in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the RleDecompress function. This Out-Of-Bounds Read occurs because FreeRDP processes the pbSrcBuffer variable without checking if it...

CVE-2023-40575

CVE-2023-40575 affects FreeRDP. The vulnerability is an Out‑Of‑Bounds Read in the general_YUV444ToRGB_8u_P3AC4R_BGRX function, likely caused by insufficient data for the pSrc variable, which can lead to crashes. It has been addressed in version 3.0.0-beta3; users should upgrade. The provided docu...

CVE-2023-40188

CVE-2023-40188 affects FreeRDP (freerdp2) and is caused by an Out-Of-Bounds Read in the general_LumaToYUV444 function when processing the in buffer without sufficient length validation. Affected versions are addressed in 2.11.0 and 3.0.0-beta3; upgrading to these or later versions is advised. Con...

CVE-2023-40187

FreeRDP CVE-2023-40187 is a Use-After-Free in the 3.x beta branch related to avc420_ensure_buffer/avc444_ensure_buffer. When piDstSize[x] == 0, ppYUVDstData[x] is freed without being updated, leading to a vulnerability. Remediation: upgrade to 3.0.0-beta3 or later. Other connected sources (e.g., ...

Out-of-bounds

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

Out-of-bounds

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

CVE-2023-40186

CVE-2023-40186 affects FreeRDP clients (not proxies). The issue is an integer overflow in the gdi_CreateSurface path that leads to an Out-of-Bounds Write. The vulnerability is fixed in FreeRDP releases 2.11.0 and 3.0.0-beta3. Affected products: FreeRDP-based clients; no details about exploitation...

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

CVE-2023-40181

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

CVE-2023-39356

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

CVE-2023-39356

CVE-2023-39356: FreeRDP contains a missing offset validation in gdi_multi_opaque_rect. The boundary check for multi_opaque_rect->numRectangles is absent, enabling an Out-Of-Bounds Read that can crash the client. Documents specify this issue is addressed in versions 2.11.0 and 3.0.0-beta3. The ...

CVE-2023-39352

CVE-2023-39352 affects FreeRDP (RDP client library). The issue is an invalid offset validation that can cause an Out Of Bounds Write when rect->left/top equal surface->width/height, potentially crashing the client. The vulnerability affects versions prior to the fix, with patches addressed ...

CVE-2023-39352

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

DEBIAN-CVE-2023-39350

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length...