Threats tagged 'ghsa-33hw-q4mc-wxc2'

FreeRDP versions from 3.0.0 up to but not including 3.32.2 contain a file descriptor leak vulnerability in the function parallel_process_irp_create. This flaw causes the client to fail to close previous descriptors on repeated IRP_MJ_CREATE requests. A malicious RDP server with parallel-device redirection enabled can exploit this by sending repeated CREATE requests, leading to exhaustion of the client's descriptor table and causing the client process to crash.