Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, deleting offscreen bitmaps left gdi-drawing pointing to freed memory, resulting in a UAF when related update packets arrived. A malicious server can trigger a client-side use after free, leading to a crash D...