CVE-2020-4033: OOB Read in RLEDECOMPRESS in FreeRDP
Published Jun 22, 2020
·Updated
In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.
Affected Software
8 affected componentsFixes available
FreeRDP freerdp<2.1.2
Fedoraproject Fedora=31
Fedoraproject Fedora=32
openSUSE Leap=15.1
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
Debian Debian Linux=10.0
debian/freerdp2
2.3.0+dfsg1-2+deb11u12.3.0+dfsg1-2+deb11u32.11.7+dfsg1-6~deb12u1
Remediation
Event History
Jun 22, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 23, 2026
Data Sourced
via Ubuntu·06:30 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·06:30 PM
DescriptionAffected Software
Data Sourced
via Launchpad·06:31 PM
Description
Frequently Asked Questions
1
What is CVE-2020-4033?
CVE-2020-4033 is a vulnerability in FreeRDP before version 2.1.2 that allows an out of bounds read in RLEDECOMPRESS.
2
Who is affected by CVE-2020-4033?
All FreeRDP based clients with sessions with color depth < 32 are affected by CVE-2020-4033.
3
What is the severity of CVE-2020-4033?
CVE-2020-4033 has a severity rating of medium (6.5).
4
How can I fix CVE-2020-4033?
The vulnerability can be fixed by updating to FreeRDP version 2.1.2 or higher.
5
Where can I find more information about CVE-2020-4033?
You can find more information about CVE-2020-4033 at the MITRE CVE database, FreeRDP's GitHub security advisories, and the FreeRDP official website.