CVE-2020-11046CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP
Medium · published May 7, 2020
What it is
In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
The record
Technical detail
- CVSS v3.1
- 5.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.01324 · 70.7th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2020-05-07T00:00Z
EPSS history
Timeline