Out-of-Bounds Read

FreeRDP is vulnerable to an Out-of-Bounds Read. The vulnerability is due to the legacy GDI drawing path with the /bpp:32 setting in FreeRDP, which results in Out-of-Bounds Read...

CVE-2024-32460

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using /bpp:32 legacy GDI drawing path with a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use modern drawin...

PT-2024-3038

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.6 FreeRDP versions prior to 3.5.0 Description The issue is related to an out-of-bounds read in the interleaved decompress function of the FreeRDP RDP client. This can allow a remote attacker to disclose protected...