Kushalkhemka

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions 3.0.0 through 3.31.0 **Description** An incorrect permission assignment allows local users to read private keys created by the `crypto write pem()` function that lack owner-only permissions. On multi-user Unix hosts, attackers can enumerate the shared temporary directory during soft-smartcard logon to access a world-readable PKINIT private-key copy. **Recommendations** Update FreeRDP to version 3.32.0 or later.

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions 2.0.0 through 3.31.0 **Description** An insecure permission issue exists in the `winpr-makecert` component. The software creates unencrypted private keys without restricting file modes to the owner only. On multi-user Unix hosts, local users can read these world-readable key files or access PFX files protected by a hard-coded default password to steal private keys. **Recommendations** Update FreeRDP to version 3.32.0 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 **Description** A stack overflow exists in the MSL decoder due to an incorrect depth check that fails to limit recursion. An attacker can provide crafted MSL images that exhaust the stack during the reading process, leading to a process crash and a denial of service. **Recommendations** Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.