Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v76r-r3hh-2mwm

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

EPSS

Процентиль: 52%
0.00665
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-457

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 месяцев назад

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

CVSS3: 8.8
redhat
около 2 месяцев назад

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

CVSS3: 6.5
nvd
около 2 месяцев назад

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

CVSS3: 6.5
debian
около 2 месяцев назад

FreeRDP versions before 3.31.0 contain an uninitialized heap memory di ...

CVSS3: 7.5
redos
20 дней назад

Уязвимость freerdp3

EPSS

Процентиль: 52%
0.00665
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-457