WRITEUP
WRITEUP
Exploit for CVE-2023-39350
- Freerdp < 2.11.0 - Integer Underflow
AI Analysis
This patch addresses CVE-2023-39350 by adding bounds checks for quantization indices in the RFX codec of FreeRDP to prevent out-of-bounds access vulnerabilities. The fix ensures that `quantIdxY`, `quantIdxCb`, and `quantIdxCr` are within the valid range of `context->numQuant`.
Attack Type
DoS
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close