CVEvulnerability

CVE-2023-40181

9.1 CRITICAL Published 2023-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125, CWE-191

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemory`, it's possible to read data beyond the transmitted packet range and likely cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected configurations

• freerdp freerdp (< 2.11.0) • freerdp freerdp 3.0.0 • debian debian linux 10.0 • fedoraproject fedora 37 • fedoraproject fedora 38 • fedoraproject fedora 39

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References