ExtractRunLengthRegular* out of bound read

Low

akallabeth published GHSA-vpv3-m3m9-4c2v

Apr 23, 2024

Package

FreeRDP (C)

Affected versions

<= 2.11.6, <= 3.5.0

Patched versions

2.11.7, 3.5.1

Description

Impact

FreeRDP based clients
Similar to GHSA-4rr8-gr65-vqrr but other branches/functions

Patches

3.5.1 - 1a755d8
2.11.7 - 2b9f30a

Workarounds

None

References

https://oss-fuzz.com/testcase-detail/6196819496337408
https://oss-fuzz.com/testcase-detail/4852534033317888