CVE-2020-4033

—

CVSS 3.1

6.5 medium

EPSS

2%p78

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.

Vendors: freerdp fedoraproject opensuse canonical debian
Products: freerdp, fedora, leap, ubuntu linux, debian linux
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.