In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
https://usn.ubuntu.com/4382-1/
https://usn.ubuntu.com/4379-1/
https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hx48-wmmm-mr5q
https://github.com/FreeRDP/FreeRDP/issues/6006
https://github.com/FreeRDP/FreeRDP/commit/ed53cd148f43cbab905eaa0f5308c2bf3c48cc37