Threats tagged 'ghsa-9hqr-f4mf-9j4g'

FreeRDP versions before 3.32.2 have a heap buffer overflow vulnerability in the transport_default_read_pdu function. This occurs when handling partial Early User Authorization reads during PROTOCOL_HYBRID_EX CredSSP. A malicious RDP server can exploit this by splitting the four-byte EUA result into short reads, causing an out-of-bounds write beyond the allocated 16 KiB buffer and resulting in client denial of service.