Keryer

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-13 **Description** A memory leak occurs in the `LoadOpenCLDeviceBenchmark()` function when parsing malformed OpenCL device profile XML files that contain unclosed device elements. An attacker with write access to the OpenCL cache directory can use malicious XML files to exhaust system memory, resulting in a denial of service. **Recommendations** Update to version 7.1.2-13 or later.

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions prior to 3.22.0 **Description** FreeRDP, a free implementation of the Remote Desktop Protocol, contains a flaw. A NULL pointer dereference exists in the `rdp write logon info v2()` function. A malicious RDP server can exploit this by sending a specially crafted LogonInfoV2 Protocol Data Unit (PDU) where `cbDomain` or `cbUserName` is set to 0, potentially causing a FreeRDP proxy to crash. **Recommendations** Update to version 3.22.0 or later.