CVSS 3.1
2.2 lowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:LCVE-2020-11044
Low (2.2). EPSS 1.7% chance of exploitation in the next 30 days.
In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-415, CWE-672
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- freerdp:freerdp