FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdi_resize_ex leaves the primary display null without ending the session, so a later bitmap update crashes the client in gdi_Bitmap_Paint.

FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdi_resize_ex leaves the primary display null without ending the session, so a later bitmap update crashes the client in gdi_Bitmap_Paint.

freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted display frames freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder freerdp: freerdp: Denial of Service via zero-width graphics reset freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages