CVE-2020-11089CWE-125

Out-of-bound read in FreeRDP

Low · published May 29, 2020

CVSS v3.1
3.7
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01145 · 66.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-05-29T00:00Z
EPSS history
Timeline
  • 29 MAY 00:00Z
    Out-of-bound read in FreeRDP
    cvelistv5