CVE-2021-37595

    Dashboard / Vulnerabilities / CVE-2021-37595

    CVE-2021-37595

    Published: 30 Jul 2021Last Modified: 9 Jul 2026

    Summary:

    Details: In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.

    References: https://github.com/FreeRDP/FreeRDP/compare/2.3.2...2.4.0, https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -0d79670a28c0ab049af08613621aa0c267f977e9

    Affected versions

    2.0.0
    2.0.0-rc4
    2.0.0-rc3
    2.0.0-rc2
    2.0.0-rc1
    2.0.0-rc0
    2.0.0-beta1+android11
    2.0.0-beta1+android10

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-37595 | CVE-DB