CVE-2024-32659

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.5.1

Description The issue is related to an out-of-bounds read in the FreeRDP client, specifically in the freerdp image copy function. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs when ((nWidth == 0) and (nHeight == 0)).

Recommendations For versions prior to 3.5.1, update to version 3.5.1, which contains a patch for the issue. As a temporary workaround, consider restricting the use of the freerdp image copy function until the patch is applied. Avoid using the condition ((nWidth == 0) and (nHeight == 0)) in the affected clients until the issue is resolved.