Threats tagged 'ghsa-63c5-cr4w-9mcg'

FreeRDP versions from 3.0.0 up to but not including 3.32.2 contain a vulnerability in the proxy component that allows connected clients to cause uncontrolled resource consumption. This occurs through intercepted Dynamic Virtual Channel (DVC) message reassembly, where attackers can declare a large DATA_FIRST length and send incomplete fragments, causing heap memory to grow proportionally to traffic and degrade service availability.