Threats tagged 'ghsa-c9xf-6g3r-f7hf'

FreeRDP versions before 3.32.2 have a memory allocation vulnerability in the rdg_receive_packet function. A malicious Remote Desktop Gateway (RD Gateway) can exploit this by sending a crafted packet with a large declared length, causing the client to allocate 2 GiB of memory before authentication. This leads to memory exhaustion and denial of service on the client side.