The vulnerability in FreeRDP involves a heap-buffer-overflow write triggered during the reassembly of TS Gateway RPC RESPONSE messages. The root cause is a mismatch in the alloc_hint capacity, which leads to writing beyond the allocated heap buffer. This can cause memory corruption, potentially destabilizing the application or enabling further exploitation. The affected versions are numerous Ubuntu package builds of FreeRDP across various Ubuntu LTS and standard releases. No CVSS score or detailed vendor advisory is available to confirm patch status or exploitation details.

Heap-buffer-overflow vulnerabilities can result in application crashes or memory corruption, which may be leveraged by attackers to execute arbitrary code or cause denial of service. However, no known exploits in the wild have been reported for this issue. The impact is limited to affected FreeRDP versions on Ubuntu platforms as listed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted TS Gateway RPC RESPONSE data with affected FreeRDP versions. Monitor vendor channels for updates and apply patches promptly once released.