FreeRDP Vulnerability Affects Clients Prior to Version 3.5.1

CVE-2024-32658

What is CVE-2024-32658?

The vulnerability in FreeRDP, a widely used free implementation of the Remote Desktop Protocol, affects versions prior to 3.5.1. It enables an out-of-bounds read condition that could allow attackers to access sensitive data from memory. This issue poses a significant security risk, as it could be exploited to reveal confidential information handled by the FreeRDP client. To mitigate this risk, users are advised to upgrade to version 3.5.1, which includes a patch addressing the vulnerability. As of now, there are no known workarounds available for those still using vulnerable versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References