{"id":"CVE-2021-37594","details":"In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.","modified":"2026-07-09T01:31:29.169733Z","published":"2021-07-30T14:15:18.647Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2.4.0"}],"source":"CPE_RANGE","vendor_product":"freerdp:freerdp"},{"extracted_events":[{"fixed":"2.4.0"}],"source":"DESCRIPTION"}]},"references":[{"type":"ADVISORY","url":"https://github.com/FreeRDP/FreeRDP/compare/2.3.2...2.4.0"},{"type":"FIX","url":"https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/freerdp/freerdp","events":[{"introduced":"0"},{"fixed":"0d79670a28c0ab049af08613621aa0c267f977e9"}],"database_specific":{"source":"REFERENCES"}}],"versions":["2.0.0","2.0.0-rc4","2.0.0-rc3","2.0.0-rc2","2.0.0-rc1","2.0.0-rc0","2.0.0-beta1+android11","2.0.0-beta1+android10","1.2.0-beta1+android9","1.2.0-beta1+android7","1.1.0-beta+2013071101","1.1.0-beta1+ios4","1.1.0-beta1+android5","1.1.0-beta1+android4","1.1.0-beta1+ios3","1.1.0-beta1+ios2","1.1.0-beta1+android3","1.1.0-beta1+android2","1.1.0-beta1+ios1","1.1.0-beta1","1.0.1","1.0.0","1.0-beta5","1.0-beta4","1.0-beta2","1.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37594.json","vanir_signatures_modified":"2026-07-09T01:31:29Z","vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["44859094772190216799483516006255789160","219582746594949160081117655936496938833","337053645452655611994011021087069876974","157259336771431149205545503885757036729","16460976124722009597311657320769444060","320878770284945101366523910707824176850","317369928379971298341380892351169113023","15127744638068472434780109462571759255"]},"id":"CVE-2021-37594-58d482d9","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/0d79670a28c0ab049af08613621aa0c267f977e9","target":{"file":"client/Windows/wf_cliprdr.c"}},{"source":"https://github.com/freerdp/freerdp/commit/0d79670a28c0ab049af08613621aa0c267f977e9","target":{"file":"client/Windows/wf_cliprdr.c","function":"wf_cliprdr_server_file_contents_request"},"deprecated":false,"digest":{"function_hash":"194536018336980843487164271303679038672","length":2892},"id":"CVE-2021-37594-c850f4b2","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}