CVE-2023-40188

CVSS V2 None CVSS V3 None
Description
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done on the `in` variable without checking if it contains data of sufficient length. Insufficient data for the `in` variable may cause errors or crashes. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
Overview
  • CVE ID
  • CVE-2023-40188
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-31T21:32:55.557Z
  • Last Modified Date
  • 2023-08-31T21:32:55.557Z
History
Created Old Value New Value Data Type Notes
2024-06-25 02:29:48 Added to TrackCVE