CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

• CWE-125
• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• http://www.freerdp.com/2020/06/22/2_1_2-releasedRelease Notes, Vendor Advisory
• https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7dPatch, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmvMitigation, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
• https://usn.ubuntu.com/4481-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.htmlThird Party Advisory
• http://www.freerdp.com/2020/06/22/2_1_2-releasedRelease Notes, Vendor Advisory
• https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7dPatch, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmvMitigation, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
• https://usn.ubuntu.com/4481-1/Third Party Advisory

Published

Jun 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11091In Weave Net before version 2.6.3, an attacker able to run a…5.8
• CVE-2020-11093Hyperledger Indy Node is the server portion of a distributed…7.5
• CVE-2020-11094The October CMS debugbar plugin before version 3.1.0 contain…9.8
• CVE-2020-11095In FreeRDP before version 2.1.2, an out of bound reads occur…5.4
• CVE-2020-11096In FreeRDP before version 2.1.2, there is a global OOB read …6.5
• CVE-2020-11097In FreeRDP before version 2.1.2, an out of bounds read occur…5.4
• CVE-2020-11099In FreeRDP before version 2.1.2, there is an out of bounds r…6.5
• CVE-2020-1110An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11100In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in H…8.8
• CVE-2020-11101Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 m…9.8
• CVE-2020-11102hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during th…5.6
• CVE-2020-11103JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x bef…9.8