Lucene search
+L

2 matches found

osv_debian
osv_debian
•added 2026/10/12 5:17 p.m.•13 views

DEBIAN-CVE-2026-109240

FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urbisochtransfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values. Attackers can send a TSURBISOCHTRANSFER IN-direction request with OutputBufferSize above INT32MAX over...

2.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•5 views

CVE-2026-109240: Reachable Assertion

FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urbisochtransfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values. Attackers can send a TSURBISOCHTRANSFER IN-direction request with OutputBufferSize above INT32MAX over...

3.1CVSS5.8AI score0.00219EPSS
SaveExploits0References2
Rows per page
Query Builder