CVE-2022-39320

CVE-2022-39320 is a vulnerability in FreeRDP, a remote desktop protocol library, affecting versions prior to 2.9.0. A malicious server can exploit an integer overflow during buffer allocation, causing an FreeRDP-based client to read and transmit out-of-bounds data back to the server, particularly when the /usb redirection switch is used. With a CVSS score of 4.6 (Medium), this vulnerability requires user interaction (UI:R) and low privileges (PR:L) for exploitation, potentially leading to limited confidentiality and availability impacts (C:L/A:L). There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.