Security Advisory

CVE-2024-32041

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-04-22 20:39:47
Last updated 2025-02-13 17:52:07
Assigner GitHub_M
State PUBLISHED

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate `/gfx` (on by default, set `/bpp` or `/rfx` options instead.