Impact

• All FreeRDP clients, all platforms

Allows reading a attacker defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer.
Can be used to crash the client or store information for later retrieval.

Patches

Fixed with commit 6b2bc41

Workarounds

None

References

Issue #6010