CVE-2022-39320

Heap buffer overflow in urbdrc channel

State: Published
Severity: 5.5 Medium
Published: Nov 16, 2022
Updated: Nov 3, 2025
Reserved: Sep 2, 2022

Description

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the `/usb` redirection switch.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L	GitHub_M

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
FreeRDPFreeRDP	< 2.9.0Affected

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qfq2-82qr-7f4j
FEDORA-2022-fd6e43dec8vendor-advisory
FEDORA-2022-076b1c9978vendor-advisory
GLSA-202401-16vendor-advisory
https://lists.debian.org/debian-lts-announce/2025/02/msg00034.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.