Threats tagged 'ghsa-2hp8-rhrv-672c'

FreeRDP versions from 3.27.0 up to but not including 3.32.2 contain a denial of service vulnerability in the rdpdr_dump_packet function. This flaw allows malicious RDP servers to cause client crashes by sending malformed device-list announcements with an invalid DeviceDataLength field. The issue triggers a fatal assertion failure when device redirection, TRACE logging, and WinPR assertions are enabled.