Threats tagged 'ghsa-4v6v-rqm8-m7cj'

FreeRDP versions prior to 3.32.2 have a heap buffer over-read vulnerability in the save_png_to_buffer() function. This flaw allows malicious RDP servers to cause client memory leakage by sending specially crafted 16 bpp DIB clipboard data. Specifically, attackers can send a CF_DIB BI_BITFIELDS image that, when converted to PNG format by a local application, causes client heap memory bytes to be embedded into the clipboard image.