CVE-2018-8786CWE-680

CVE-2018-8786: vulnerability in Check Point Software Technologies Ltd. FreeRDP

Published · Updated

Follow this CVE+ Monitor FreeRDP+ Monitor freerdp2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.2%
FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.
Affected products
Check Point Software Technologies Ltd. · FreeRDP
Related CVEs — Check Point Software Technologies Ltd. FreeRDP

In the same product, most dangerous first.

CVE-2018-8787—CVE-2018-8787EPSS 8.4%CVE-2018-8788—CVE-2018-8788EPSS 7.4%CVE-2018-8784—CVE-2018-8784EPSS 7.3%CVE-2018-8785—CVE-2018-8785EPSS 7.3%CVE-2018-8789—CVE-2018-8789EPSS 5.2%