| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | < 3.28.0 | 3.28.0 |
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update_read_delta_points in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeof(DELTA_POINT), allowing a malicious RDP peer to allocate an undersized heap buffer and then write beyond it during initialization. This issue is fixed in version 3.28.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free