CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are vulnerable to a heap out-of-bounds read in the general_ChromaV1ToYUV444 function, which can be exploited by a malicious RDP server to manipulate RFX_AVC444_BITMAP_STREAM data. This vulnerability may lead to unauthorized memory access, potentially exposing sensitive information. Organizations using FreeRDP should prioritize patching to mitigate the risk associated with this issue.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A malicious RDP server can craft a RFX_AVC444_BITMAP_STREAM with specific frame geometry to trigger an out-of-bounds memory read past the allocated luma plane.
Related CVEs
Other vulnerabilities affecting the same vendor(s)