| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | ≥ 3.17.0, < 3.32.2 | 3.32.2 |
FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free