CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are vulnerable to a buffer over-read in the rts_read_result function of the RPC gateway transport parser, which can be exploited by attackers sending a malicious BIND_ACK PDU. This vulnerability may lead to an out-of-bounds read, resulting in a process abort. Organizations using FreeRDP should prioritize patching this issue to mitigate potential disruptions and security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.