CVE-2026-35444

SDLimage is a library to load images of various formats as SDL surfaces. In dolayersurface in src/IMGxcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size cmnum. A crafted .xcf file with a small colormap and...

The vulnerability in the `libfreerdp/codec/rfx.c` component of the RDP client FreeRDP, related to the occurrence of operations outside the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability in the libfreerdp/codec/rfx.c component of the RDP client FreeRDP is related to the issue where operations are performed outside of the buffer boundaries in memory when processing parameters tile-quantIdxY, tile-quantIdxCb, and tile-quantIdxCr. Exploiting this vulnerability can...

SUSE CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...