libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc return value.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "freerdp2-dev", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "freerdp2-shadow-x11", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "freerdp2-wayland", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "freerdp2-x11", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libfreerdp-client2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libfreerdp-server2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libfreerdp-shadow-subsystem2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libfreerdp-shadow2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libfreerdp2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libuwac0-0", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libuwac0-dev", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libwinpr-tools2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libwinpr2-2", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "libwinpr2-dev", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" }, { "binary_name": "winpr-utils", "binary_version": "2.1.1+dfsg1-0ubuntu0.18.04.1" } ] }