CVE-2023-40187: Use-After-Free in FreeRDP
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of the 3.x beta branch are subject to a Use-After-Free issue in the avc420ensurebuffer and avc444ensurebuffer functions. If the value of piDstSize[x] is 0, ppYUVDstData[x] will be freed. However, in this case ppYUVDstData[x] will not have been updated which leads to a Use-After-Free vulnerability. This issue has been addressed in version 3.0.0-beta3. Users of the 3.x beta releases are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-40187?
CVE-2023-40187 is a Use-After-Free vulnerability in FreeRDP, specifically in the avc420_ensure_buffer and avc444_ensure_buffer functions.
How severe is CVE-2023-40187?
CVE-2023-40187 has a severity rating of 9.8 (Critical).
Which versions of FreeRDP are affected by CVE-2023-40187?
Versions 3.0.0-beta1 and 3.0.0-beta2 of FreeRDP are affected by CVE-2023-40187.
What is the CWE-ID associated with CVE-2023-40187?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-40187 is CWE-416.
How can the Use-After-Free vulnerability CVE-2023-40187 be fixed?
To fix the Use-After-Free vulnerability CVE-2023-40187, it is recommended to update to a patched version of FreeRDP.