← Back

CVE-2023-40188

nvd nist
Published: Aug 31, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done on the `in` variable without checking if it contains data of sufficient length. Insufficient data for the `in` variable may cause errors or crashes. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected (7)

1 product
Freerdp
1 product
Debian Linux
1 product
Fedora
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Freerdp
Before 2.11.0
Version 3.0.0 beta1
Version 3.0.0 beta2
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Version 10.0
Fedoraproject
Version 37
Version 38
Version 39

References (15)

Source: security-advisories@github.com
ExploitVendor Advisory
Source: security-advisories@github.com
Mailing ListThird Party Advisory
Source: security-advisories@github.com
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.