CVE-2020-11038

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.

• CWE-680
• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlMailing List, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h25x-cqr6-fp6gThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlMailing List, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h25x-cqr6-fp6gThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory

Published

May 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11032In GLPI before version 9.4.6, there is a SQL injection vulne…7.2
• CVE-2020-11033In GLPI from version 9.1 and before version 9.4.6, any API u…7.2
• CVE-2020-11034In GLPI before version 9.4.6, there is a vulnerability that …6.1
• CVE-2020-11035In GLPI after version 0.83.3 and before version 9.4.6, the C…9.3
• CVE-2020-11036In GLPI before version 9.4.6 there are multiple related stor…5.4
• CVE-2020-11037In Wagtail before versions 2.7.3 and 2.8.2, a potential timi…4.7
• CVE-2020-11039In FreeRDP less than or equal to 2.0.0, when using a manipul…6.8
• CVE-2020-1104A spoofing vulnerability exists when Microsoft SharePoint Se…5.4
• CVE-2020-11040In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7
• CVE-2020-11041In FreeRDP less than or equal to 2.0.0, an outside controlle…2.7
• CVE-2020-11042In FreeRDP greater than 1.1 and before 2.0.0, there is an ou…5.9
• CVE-2020-11043In FreeRDP less than or equal to 2.0.0, there is an out-of-b…2.7