Threats tagged 'ghsa-gm6q-vf9r-pj34'

FreeRDP versions prior to 3.32.2 contain a heap out-of-bounds write vulnerability in the planar codec. This occurs because the function freerdp_bitmap_planar_context_reset updates dimensions before buffer reallocation succeeds, and failure of ResetGraphics is only logged without proper handling. A malicious RDP server can exploit this by sending an oversized ResetGraphics PDU followed by a GFX PLANAR command, causing heap corruption and client crashes.