Threats tagged 'ghsa-h4g7-hfh9-p954'

FreeRDP versions from 2.0.0 up to but not including 3.32.2 contain an out-of-bounds read vulnerability in the freerdp_dsp_decode_gsm610 function. This flaw allows a malicious RDP server to send specially crafted truncated GSM610 audio frames that cause the client to read beyond the intended audio buffer. Such malformed frames can lead to a client crash when negotiating GSM610 audio codec and sending short WAVE2 messages.