Jimaf

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions 3.17.1 through 3.31.0 **Description** A heap buffer over-read exists in the `DynvcTrackerHandleCreateBack()` function of the freerdp-proxy DRDYNVC channel handler. A malicious backend RDP server can trigger this by sending a `CREATE REQUEST PDU` where the channel name is missing a NUL byte. This leads to an unbounded snprintf read, which may result in memory leaking into proxy logs or a process crash. **Recommendations** Update FreeRDP to version 3.32.0.