CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are susceptible to an out-of-bounds write vulnerability in the urb_send_current_frame_number_result() function, which can be exploited by a malicious RDP server through a specially crafted USB redirection message. This vulnerability may lead to a denial of service when verbose asserts are enabled, impacting the stability of the affected software. Organizations using FreeRDP should prioritize updates to version 3.31.0 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb_send_current_frame_number_result() function. A malicious RDP server can send a crafted 28-byte USB redirection message to trigger a 4-byte write past the allocated 16-byte buffer, causing denial of service when verbose asserts are enabled.