CVE-2020-4033CWE-125
OOB Read in RLEDECOMPRESS in FreeRDP
Low · published June 22, 2020
What it is
In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.
The record
Technical detail
- CVSS v3.1
- 3.1 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01764 · 77.9th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2020-06-22T00:00Z
EPSS history
Timeline