FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp2Upgrade freerdp | Aug 22, 2024 | Jan 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp | May 16, 2024 | Jan 19, 2024 |
| Debian | — | Upgrade freerdp2 | Feb 17, 2025 | Jan 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Jul 23, 2024 | Jan 19, 2024 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdpUpgrade libwinpr | Nov 21, 2024 | Jan 19, 2024 |
| Redhat_linux | — | Upgrade freerdp-libsUpgrade freerdp-libs-debuginfoNo solution existsUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdp | Nov 13, 2024 | Jan 19, 2024 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp-debuginfo | Mar 18, 2025 | Jan 19, 2024 |
| Suse | — | Upgrade libfreerdp2-2Upgrade winpr-develUpgrade freerdp-serverUpgrade freerdp-develUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade libwinpr2-2Upgrade freerdp-proxyUpgrade libuwac0-0Upgrade libfreerdp2Upgrade winpr2-develUpgrade libwinpr2Upgrade freerdp | Feb 29, 2024 | Jan 19, 2024 |
| Ubuntu | — | Upgrade libfreerdp2-2 | Apr 25, 2024 | Jan 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub