Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-misc/freerdp. | Oct 30, 2017 | Nov 16, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdpUpgrade freerdp-pluginsUpgrade freerdp-libs | Dec 4, 2019 | Nov 16, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-plugins | Dec 18, 2019 | Nov 16, 2014 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-plugins | Nov 19, 2019 | Nov 16, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 28, 2014 |
| Suse | — | Upgrade freerdpUpgrade libfreerdp-1_0Upgrade libfreerdp2Upgrade libwinpr2Upgrade libfreerdp-1_0-pluginsUpgrade freerdp-develUpgrade winpr2-devel | Dec 18, 2015 | Nov 16, 2014 |
| Ubuntu | — | Upgrade libfreerdp1Upgrade libfreerdp-client1.1 | Aug 7, 2017 | Nov 16, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub