Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v8g5-qxq2-3959

Опубликовано: 01 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

EPSS

Процентиль: 36%
0.00432
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
nvd
2 дня назад

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

CVSS3: 7.5
debian
2 дня назад

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability ...

EPSS

Процентиль: 36%
0.00432
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-125