Threats tagged 'ghsa-f3vp-w46f-jr9h'

FreeRDP versions before 3.32.2 contain a vulnerability where the OutputBufferLength in serial device-control IRP requests is not properly capped. This flaw allows malicious servers using serial redirection to send specially crafted requests that trigger excessive memory allocation on the client side, potentially leading to denial of service.