SUSE-SU-2024:1856-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...

CVE-2024-32660

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available...