CVE-2023-40574

2023-08-3100:00:00

ubuntu.com

freerdp

remote desktop protocol

out-of-bounds write

vulnerability

apache license

upgrade

unix

0.001 Low

EPSS

Percentile

29.1%

JSON

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP),
released under the Apache license. Affected versions are subject to an
Out-Of-Bounds Write in the writePixelBGRX function. This issue is likely
down to incorrect calculations of the nHeight and srcStep variables.
This issue has been addressed in version 3.0.0-beta3. Users are advised to
upgrade. There are no known workarounds for this issue.