FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-debuginfo | May 16, 2024 | Apr 23, 2024 |
| Debian | — | Upgrade freerdp2Upgrade freerdp3 | Feb 17, 2025 | Apr 23, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdpUpgrade libwinprUpgrade freerdp-libs | Jan 21, 2025 | Apr 23, 2024 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr | Nov 21, 2024 | Apr 23, 2024 |
| Redhat_linux | — | Upgrade libwinprNo solution existsUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdp-libs | Nov 13, 2024 | Apr 23, 2024 |
| Rocky_linux | — | Upgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade libwinprUpgrade freerdpUpgrade libwinpr-debuginfoUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-devel | Mar 18, 2025 | Apr 23, 2024 |
| Suse | — | Upgrade winpr2-develUpgrade libuwac0-0Upgrade winpr-develUpgrade libfreerdp2-2Upgrade freerdp-serverUpgrade freerdp-develUpgrade libwinpr2Upgrade freerdp-waylandUpgrade freerdp-proxyUpgrade libfreerdp2Upgrade freerdpUpgrade uwac0-0-develUpgrade libwinpr2-2 | May 30, 2024 | Apr 23, 2024 |
| Ubuntu | — | Upgrade libfreerdp2-2Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp3-3Upgrade libfreerdp-client2-2t64 (Ubuntu Pro)Upgrade libfreerdp-server2-2t64 (Ubuntu Pro) | Apr 26, 2024 | Apr 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub