W226688

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions prior to 3.32.0 **Description** A NULL pointer dereference occurs in the client video redirection channel. This issue allows a malicious server to cause a denial of service by sending out-of-order messages. Specifically, an attacker can send a Geometry CLEAR message to null the `presentation->geometry` variable, followed by a VideoData message that dereferences it, resulting in a client crash. **Recommendations** Update to version 3.32.0 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions 7.1.0-20 through 7.1.2-31 **Description** An invalid memory free occurs during the fx operation when the initialization of an FX runtime entry fails. This can be triggered by an attacker to cause memory corruption and application crashes. **Recommendations** Update ImageMagick to version 7.1.2-32 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 **Description** The TGA image decoder contains an uninitialized memory read. This occurs when the software processes a specially crafted TGA image, which can lead to the disclosure of memory contents from the ImageMagick process. **Recommendations** Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.