| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | < 3.32.2 | 3.32.2 |
FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering an assertion or division by zero that terminates the client session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free