CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto

• CWE-680
• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00010.htmlMailing List, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/blob/616af2d5b86dc24c7b3e89870dbcffd841d9a535/ChangeLog#L4Release Notes, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/6382Patch, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4r38-6hq7-j3j9Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
• https://usn.ubuntu.com/4481-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00010.htmlMailing List, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/blob/616af2d5b86dc24c7b3e89870dbcffd841d9a535/ChangeLog#L4Release Notes, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/pull/6382Patch, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4r38-6hq7-j3j9Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/
• https://usn.ubuntu.com/4481-1/Third Party Advisory

Published

Jul 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15098In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.…8.8
• CVE-2020-15099In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.…8.1
• CVE-2020-1510An information disclosure vulnerability exists when the win3…5.5
• CVE-2020-15100In freewvs before 0.1.1, a user could create a large file th…3.3
• CVE-2020-15101In freewvs before 0.1.1, a directory structure of more than …3.3
• CVE-2020-15102In PrestaShop Dashboard Productions before version 2.1.0, th…6.5
• CVE-2020-15104In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 …5.4
• CVE-2020-15105Django Two-Factor Authentication before 1.12, stores the use…5.4
• CVE-2020-15106In etcd before versions 3.3.23 and 3.4.10, a large slice cau…6.5
• CVE-2020-15107In openenclave before 0.10.0, enclaves that use x87 FPU oper…5.3
• CVE-2020-15108In glpi before 9.5.1, there is a SQL injection for all usage…7.1
• CVE-2020-15109In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there i…5.3