Threats tagged 'ghsa-qrqm-xr33-jxpf'

FreeRDP versions prior to 3.32.2 contain a denial of service vulnerability in the WinPR library functions winpr_read_png_from_buffer() and winpr_convert_from_jpeg(). These functions lack proper error handling for malformed PNG or truncated JPEG clipboard payloads, which can be exploited by a malicious RDP server or a man-in-the-middle to cause the client application to abort or exit unexpectedly.