Freerdp · Freerdp · CVE-2020-11098
**Name of the Vulnerable Software and Affected Versions**
FreeRDP versions prior to 2.1.2
**Description**
The issue is related to an out-of-bound read in the `glyph cache put` component of the FreeRDP protocol implementation. This can allow a remote attacker to access confidential data and cause a denial of service. The problem affects all FreeRDP clients with the `+glyph-cache` option enabled.
**Recommendations**
For FreeRDP versions prior to 2.1.2, update to version 2.1.2 to resolve the issue. As a temporary workaround, consider disabling the `+glyph-cache` option until a patch is available.