Threats tagged 'ghsa-9fvr-q6q4-7h2p'

FreeRDP versions prior to 3.32.2 contain a vulnerability where the function rdpgfx_on_data_received improperly handles certain decompression status codes. Specifically, it rejects only negative zgfx_decompress status values but passes a null output pointer to Stream_StaticConstInit when a zero-output ZGFX payload is received. This can cause a client assertion abort. A malicious RDP server can exploit this by sending a crafted zero-output ZGFX payload on the RDPGFX channel after session activation, causing the client to terminate unexpectedly.