FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX_RESET_GRAPHICS_PDU` to allocate too small buffers, possibly triggering later out of bound read/write. Data extraction over network is not possible, the buffers are used to display an image. This issue has been addressed in version 2.11.5 and 3.2.0. Users are advised to upgrade. there are no know workarounds for this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp2Upgrade freerdp | Aug 22, 2024 | Jan 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr | May 16, 2024 | Jan 19, 2024 |
| Debian | — | Upgrade freerdp2 | Feb 17, 2025 | Jan 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freerdp-libsUpgrade libwinprUpgrade freerdp | Jul 23, 2024 | Jan 19, 2024 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinprUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libs | Nov 21, 2024 | Jan 19, 2024 |
| Redhat_linux | — | Upgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libsNo solution exists | Nov 13, 2024 | Jan 19, 2024 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdp | Mar 18, 2025 | Jan 19, 2024 |
| Suse | — | Upgrade winpr2-develUpgrade libwinpr2Upgrade freerdpUpgrade libfreerdp2Upgrade libuwac0-0Upgrade freerdp-proxyUpgrade winpr-develUpgrade uwac0-0-develUpgrade freerdp-develUpgrade freerdp-waylandUpgrade freerdp-serverUpgrade libfreerdp2-2Upgrade libwinpr2-2 | Feb 29, 2024 | Jan 19, 2024 |
| Ubuntu | — | Upgrade libfreerdp2-2 | Apr 25, 2024 | Jan 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub