Denial Of Service (DoS)

libfreerdp.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the rfx.c due to a stack overflow error which allows an attacker to cause an application crash, or potentially execute arbitrary code...

CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...