Vulnerability of the interleaved_decompress() function in the RDP client FreeRDP, allowing attackers to disclose protected information

The vulnerability of the interleaveddecompress function in the RDP client FreeRDP involves reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

freerdp:TestFuzzCodecs: Heap-buffer-overflow in ExtractRunLength

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6196819496337408 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCodecs Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2024-3038

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.6 FreeRDP versions prior to 3.5.0 Description The issue is related to an out-of-bounds read in the interleaved decompress function of the FreeRDP RDP client. This can allow a remote attacker to disclose protected...