Threats tagged 'ghsa-q6j5-jc7p-hf9x'

FreeRDP clients from version 3.0.0 up to but not including 3.32.2, when built with verbose WinPR assertions, contain a reachable assertion failure triggered by malformed RTS padding. This vulnerability allows an attacker controlling an RD Gateway to send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding, causing the client process to abort.