CVE-2023-39353

Summary

CVE-2023-39353 is a vulnerability affecting FreeRDP, an open-source Remote Desktop Protocol (RDP) implementation. The issue lies in the lack of offset validation in the `libfreerdp/codec/rfx.c` file for `tile->quantIdxY`, `tile->quantIdxCb`, and `tile->quantIdxCr`. This oversight can result in an out-of-bounds read, leading to a crash. Affected versions include those prior to 2.11.0 and 3.0.0-beta3. To mitigate this risk, users are strongly urged to upgrade to the patched versions as soon as possible. No known workarounds exist for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.