FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done on the `in` variable without checking if it contains data of sufficient length. Insufficient data for the `in` variable may cause errors or crashes. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-08-31T21:32:55.557Z

Updated: 2024-08-02T18:24:55.790Z

Reserved: 2023-08-09T15:26:41.054Z

Link: CVE-2023-40188

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-31T22:15:08.523

Modified: 2024-11-21T08:18:57.860

Link: CVE-2023-40188

cve-icon Redhat

Severity : Low

Publid Date: 2023-09-01T00:00:00Z

Links: CVE-2023-40188 - Bugzilla