CVE-2024-32660

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-32660

Severity

7.5

High

CVSS V3

Summary

FreeRDP zgfx_decompress out of memory vulnerability

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.