Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-109251 →
DEBIAN-CVE-2026-109251
FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wraps in 32-bit arithmetic and is skipped. A malicious RDP server can send a negative topLevelLeft to clients connecting with /video, causing an out-of-bounds write of decoded H.264 picture data or a client abort.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
freerdp2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
freerdp3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
freerdp3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org