CVE-2024-22211CWE-122CWE-190

FreeRDP integer Overflow leading to Heap Overflow

Low · published January 19, 2024

CVSS v3.1
3.7
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01076 · 64.7th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-190 · Integer Overflow or Wraparound
Published
2024-01-19T19:54Z
EPSS history
Timeline
  • 19 JAN 19:54Z
    FreeRDP integer Overflow leading to Heap Overflow
    cvelistv5