CVE-2023-40181

MEDIUM

Freerdp < 2.11.0 - Integer Underflow

Title source: rule
STIX 2.1

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemory`, it's possible to read data beyond the transmitted packet range and likely cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Scores

CVSS v3 5.3
EPSS 0.0025
EPSS Percentile 47.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-191 CWE-125
Status published
Products (6)
debian/debian_linux 10.0
fedoraproject/fedora 37
fedoraproject/fedora 38
fedoraproject/fedora 39
freerdp/freerdp 3.0.0 beta1 (2 CPE variants)
freerdp/freerdp < 2.11.0
Published Aug 31, 2023
Tracked Since Feb 18, 2026