Threats tagged 'ghsa-j727-x54m-hfv3'

FreeRDP versions before 3.32.2 contain a vulnerability in the gdi_CreateSurface function related to handling RDPGFX CREATE_SURFACE PDUs. The flaw involves improper checking of the product of surface dimensions, leading to an integer wrap and heap buffer overflow on 32-bit builds, and an excessive memory allocation on 64-bit builds. This can be exploited by a malicious RDP server sending crafted CREATE_SURFACE PDUs to cause heap corruption or denial of service.