CVE-2023-40186

Summary

CVE-2023-40186 is a vulnerability affecting FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP) under the Apache license. Affected versions of FreeRDP contain an Integer Overflow leading to Out-of-Bound Write vulnerability in the `gdi_CreateSurface` function. This issue solely impacts FreeRDP based clients, and proxies remain unaffected as image decoding doesn't occur through them. Users are advised to upgrade to versions 2.11.0 or 3.0.0-beta3 to mitigate this risk, as no known workarounds exist for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.