CVE-2023-39352

Summary

CVE-2023-39352 is a vulnerability affecting FreeRDP, an open-source Remote Desktop Protocol implementation. The flaw involves an invalid offset validation leading to an Out-of-Bound Write. This can occur when specific rectangle coordinates, `rect->left` and `rect->top`, are equal to the surface width and height, respectively. While this issue typically causes a crash, it may potentially be exploited for more serious consequences. Users should upgrade to FreeRDP versions 2.11.0 or 3.0.0-beta3 to mitigate the risk. No known workarounds are currently available for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.