{"action":"Upgrade freerdp2 to 2.1.1+dfsg1-1 or later.","affected":[{"fixed":"2.1.1+dfsg1-1","introduced":"0"}],"component":"freerdp2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.1.1+dfsg1-1"],"id":"tcs_01M5NEFYDA8MP9D836SA9Y8YDM","modified_at":"2026-09-11T11:00:38.307697027Z","published_at":"2020-05-29T19:15:10.497Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-11041","https://security-tracker.debian.org/tracker/CVE-2020-11041"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-11041","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-11041"}],"summary":"In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash"}