Impact

• All FreeRDP clients, all platforms

Out of bounds read.
A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data.

Patches

Fixed with commit f5e73cc

Workarounds

None

References

#6009