CVE-2023-40567

MediumCVSS 6.5

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), has a vulnerability in the `clear_decompress_bands_data` function that lacks offset validation, leading to an out-of-bounds write. Exploitation of this vulnerability may result in unauthorized writes.

Risk Assessment

Organizations may be exposed to attacks that could lead to data loss or system compromise. Failing to update may increase the risk of this vulnerability being exploited.

Recommendation

It is recommended to upgrade to versions 2.11.0 or 3.0.0-beta3 to mitigate this vulnerability. There are no known workarounds for this issue.

Original NVD description (English source)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds write. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.