OOB Read in RLEDECOMPRESS

Low

akallabeth published GHSA-7rhj-856w-82p8

Jun 22, 2020

Package

FreeRDP

Affected versions

<= 2.1.1

Patched versions

2.1.2

Description

Impact

All FreeRDP based clients with sessions with color depth < 32
Out of bound read of up to 4 bytes

Workarounds

Connect using /bpp:32

References

GHSL-2020-128