Threats tagged 'ghsa-9gqr-m6pm-p7q7'

FreeRDP versions prior to 3.32.2 contain an out-of-bounds write vulnerability in the proxy component. This occurs because the function rdp_read_bitmap_cache_v2_capability_set only rejects numCellCaches values above 5, but later accesses fixed indices 0 through 4 regardless. A client connecting to the proxy can declare fewer than five cell caches, leading to heap corruption, potential data leakage, or a crash.