Incorrect offset calculation leading to denial of service in FreeRDP

CVE-2023-39350

What is CVE-2023-39350?

This vulnerability in FreeRDP affects client implementations where an integer underflow occurs due to inadequate length validation of the block length. When a block length that is too small is supplied, it can lead to a Denial of Service condition, causing the application to abort unexpectedly. Versions 2.11.0 and 3.0.0-beta3 have addressed this issue, and users are strongly advised to upgrade to these versions to ensure protection against this vulnerability.

References