| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | = 1.1.0≤ 1.0.2 | |
| lodepng | ≤ 2019-09-28 |
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free