CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are susceptible to a denial-of-service vulnerability due to an infinite loop in the pool_decode_rect function, triggered by maliciously crafted AVC444 graphics updates from an RDP server. This flaw can lead to excessive CPU consumption, disrupting normal client operations. Organizations using FreeRDP should prioritize patching to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode path to loop indefinitely, consuming CPU and preventing normal client operation.