| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | ≥ 3.11.0, < 3.32.2 | 3.32.2 |
FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clients. Attackers controlling an RDP server can send a RemoteFX tileset with RLGR code 32767, triggering a signed narrowing assertion in rfx_rlgr_decode and crashing the client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free