CVE-2023-39351

Summary

CVE-2023-39351 is a newly disclosed vulnerability affecting FreeRDP, an open-source Remote Desktop Protocol implementation. Affected versions of FreeRDP contain a Null Pointer Dereference issue in the RemoteFX (rfx) handling. Specifically, the `rfx_process_message_tileset` function can lead to a NULL pointer if the initialization of tiles is not completed, causing a crash. This vulnerability, which has no known workarounds, can be exploited to cause the program to crash. Users are strongly advised to upgrade to FreeRDP versions 2.11.0 or 3.0.0-beta3 in order to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.