Threats tagged 'ghsa-pmj8-2jw3-72qf'

FreeRDP versions from 3.0.0 up to but not including 3.32.2 contain a denial of service vulnerability. This flaw allows malicious RDP servers to crash clients built with verbose WinPR assertions by sending specially crafted RemoteFX region rectangles. The vulnerability triggers a 16-bit coordinate assertion failure in the rfx_process_message function, causing the client process to terminate unexpectedly.