CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.31.0 are vulnerable to an integer overflow in the Stream_EnsureRemainingCapacity function, which can be exploited by remote attackers to induce a denial of service. By sending a specially crafted WebSocket Ping frame, an attacker can trigger a double free condition, leading to crashes of the FreeRDP client during connection attempts. Organizations using FreeRDP should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A malicious RD Gateway peer can send a WebSocket Ping frame with a crafted 64-bit extended payload length to trigger integer wraparound, resulting in a double free that crashes the FreeRDP client during connection.