CVE-2020-11524: Medium severity FreeRDP freerdp vulnerability
Last updated 25 August 2025
Other sources
libfreerdp/codec/interleaved.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp2to a version that resolves this vulnerability.Fixed in 2.3.0+dfsg1-2+deb11u1Fixed in 2.3.0+dfsg1-2+deb11u3Fixed in 2.11.7+dfsg1-6~deb12u1 - Upgrade
Upgrade
alpine/freerdpto a version that resolves this vulnerability.Fixed in 2.0.0-r0 - Upgrade
Upgrade
alpine/freerdp2to a version that resolves this vulnerability.Fixed in 2.0.0-r0
Event History
Frequently Asked Questions
What is CVE-2020-11524?
CVE-2020-11524 is a vulnerability in FreeRDP versions > 1.0 through 2.0.0-rc4 that allows for an out-of-bounds write.
How does CVE-2020-11524 affect FreeRDP?
CVE-2020-11524 affects FreeRDP versions > 1.0 through 2.0.0-rc4, potentially allowing attackers to perform out-of-bounds writes.
What is the severity of CVE-2020-11524?
The severity of CVE-2020-11524 is not specified in the provided information.
How can I fix CVE-2020-11524?
To fix CVE-2020-11524, update FreeRDP to version 2.0.0-rc4 or later.
Where can I find more information about CVE-2020-11524?
More information about CVE-2020-11524 can be found in the following references: [GitHub Advisory](https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgw8-3mp2-p5qw), [Publications Office of the European Union](https://pub.freerdp.com/cve/CVE-2020-11524/pocAnalysis_3.pdf), [FreeRDP GitHub Commits](https://github.com/FreeRDP/FreeRDP/commits/master).