CVE-2023-39353
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
FreeRDP, a free implementation of the RDP protocol, has an issue with missing offset validation leading to out of bounds read. In the `libfreerdp/codec/rfx.c` file, the lack of validation in `tile->quantIdxY`, `tile->quantIdxCb`, and `tile->quantIdxCr` can lead to application crashes.
Risk Assessment
The lack of offset validation may lead to uncontrolled memory access, threatening system stability and potentially being exploited for attacks. Organizations should be aware of the risks associated with using vulnerable software versions.
Recommendation
It is recommended to upgrade to version 2.11.0 or 3.0.0-beta3 to mitigate this vulnerability. There are no known workarounds for this issue.
Original NVD description (English source)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offset validation in `tile->quantIdxY`, `tile->quantIdxCb`, and `tile->quantIdxCr`. As a result crafted input can lead to an out of bounds read access which in turn will cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.