FreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl->primary (SDL_Surface) is accessed after it has been freed during RDPGFX ResetGraphics handling. This vulnerability is fixed in 3.20.1.

N/A

使用共享资源的并发执行不恰当同步问题(竞争条件)

FreeRDP 资源管理错误漏洞

FreeRDP是FreeRDP团队的一款开源的远程桌面协议（RDP）的实现。 FreeRDP 3.20.1之前版本存在资源管理错误漏洞，该漏洞源于RDPGFX动态虚拟通道线程和SDL渲染线程之间的竞争条件，可能导致堆释放后重用。

N/A

N/A