CVE-2023-40576
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
FreeRDP, a free implementation of the RDP protocol, has a vulnerability in the `RleDecompress` function due to an Out-Of-Bounds Read. This issue occurs when the `pbSrcBuffer` variable is processed without checking if it contains sufficient data.
Risk Assessment
Insufficient data in the `pbSrcBuffer` variable may lead to errors or crashes, potentially affecting system stability. Organizations should be aware of the risks associated with using vulnerable software versions.
Recommendation
It is recommended to upgrade to version 3.0.0-beta3 to mitigate this vulnerability. There are no known workarounds for this issue.
Original NVD description (English source)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `RleDecompress` function. This Out-Of-Bounds Read occurs because FreeRDP processes the `pbSrcBuffer` variable without checking if it contains data of sufficient length. Insufficient data in the `pbSrcBuffer` variable may cause errors or crashes. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.