Unrated severityNVD Advisory· Published May 7, 2020· Updated Aug 4, 2024
Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP
CVE-2020-11046
Description
In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- usn.ubuntu.com/4379-1/mitrevendor-advisory
- usn.ubuntu.com/4382-1/mitrevendor-advisory
- lists.debian.org/debian-lts-announce/2020/08/msg00054.htmlmitremailing-list
- lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlmitremailing-list
- github.com/FreeRDP/FreeRDP/commit/ed53cd148f43cbab905eaa0f5308c2bf3c48cc37mitre
- github.com/FreeRDP/FreeRDP/issues/6006mitre
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hx48-wmmm-mr5qmitre
News mentions
0No linked articles in our index yet.