CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are vulnerable due to inadequate validation of MonitorIds array values in RDP connection files, which can lead to out-of-bounds heap read and write operations. This flaw allows attackers to craft malicious RDP files that exploit the vulnerability, potentially leading to arbitrary code execution or crashes. Organizations using FreeRDP, particularly those handling sensitive remote desktop connections, should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xf_detect_monitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write operations when opened in xfreerdp.