Unrated severityNVD Advisory· Published Nov 16, 2022· Updated Apr 23, 2025
Out of bounds read in zgfx decoder in FreeRDP
CVE-2022-39317
Description
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. This issue has been addressed in version 2.9.0. There are no known workarounds for this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords10 versionspkg:rpm/almalinux/freerdppkg:rpm/almalinux/freerdp-develpkg:rpm/almalinux/freerdp-libspkg:rpm/almalinux/libwinprpkg:rpm/almalinux/libwinpr-develpkg:rpm/opensuse/freerdp&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4
< 2:2.4.1-5.el9+ 9 more
- (no CPE)range: < 2:2.4.1-5.el9
- (no CPE)range: < 2:2.4.1-5.el9
- (no CPE)range: < 2:2.4.1-5.el9
- (no CPE)range: < 2:2.4.1-5.el9
- (no CPE)range: < 2:2.4.1-5.el9
- (no CPE)range: < 2.4.0-150400.3.18.1
- (no CPE)range: < 2.4.0-150400.3.18.1
- (no CPE)range: < 2.1.2-12.35.1
- (no CPE)range: < 2.1.2-12.35.1
- (no CPE)range: < 2.4.0-150400.3.18.1
Patches
Vulnerability mechanics
References
4- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/mitrevendor-advisory
- security.gentoo.org/glsa/202401-16mitrevendor-advisory
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99cm-4gw7-c8jhmitre
News mentions
0No linked articles in our index yet.