Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-40574 EUVD-2023-45142

Out-Of-Bounds Write in FreeRDP

Published Aug 31, 2023 · Updated Feb 13, 2025 · Assigned by GitHub_M

Vendor: FreeRDP Product: FreeRDP

Description

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely down to incorrect calculations of the `nHeight` and `srcStep` variables. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
FreeRDP FreeRDP >= 3.0.0-beta1, < 3.0.0-beta3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
SLES 15 SP4 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
SLES 12 SP5 freerdp 2.1.2-12.38.1 SUSE-SU-2023:4611-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed freerdp 3.4.0-1.1 openSUSE-SU-2024:13815-1
openSUSE Tumbleweed freerdp2 2.11.5-1.1 openSUSE-SU-2024:13816-1
openSUSE Leap 16.0 freerdp 3.22.0-160000.1.1 openSUSE-SU-2026:20339-1
openSUSE Leap 15.5 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1
openSUSE Leap 15.4 freerdp 2.4.0-150400.3.23.1 SUSE-SU-2023:4893-1

Advisories 6

References