CVE-2024-32661

HIGH 7.5CVE-2024-32661 · Published 23/04/2024 · updated 17/06/2026

In short

CVE-2024-32661 is a HIGH (CVSS 7.5) vulnerability affecting freerdp (freerdp).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.6% of all vulnerabilities.
Fix: update to 3.5.1 or later.

Package	Affected versions	Patched versions
freerdp freerdp	`< 3.5.1`	`3.5.1`

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

References

FreeRDP/FreeRDP commit 71e463e · Patch
FreeRDP/FreeRDP security advisory · Vendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/5JL476WVJSIE7SBUKVJRVA6A52V2HOLZ · Third Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/7SIS6NUNLUBOV4CPCSWKDE6T6C2W3WTR · Third Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/PX3U6YPZQ7PEJBVKSBUOLWVH7DHROHY5 · Third Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/ZKI4UISUXYNBPN4K6TIQKDRTIJ6CDCKJ · Third Party Advisory
lists.debian.org/debian-lts-announce/2025/02/msg00016.html

More vulnerabilities in freerdp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

freerdp

< 3.5.1

3.5.1

More vulnerabilities in freerdp

See all →