Impact

• All FreeRDP clients, all platforms, only when running with logger set to WLOG_TRACE
• Read of invalid array index, data printed as string to local terminal
• Possible crash of application

Workarounds

Do not set log-level to trace

References

• https://pub.freerdp.com/cve/CVE-2020-11019/