Threats tagged 'ghsa-hgjh-h5xh-g4gm'

FreeRDP versions prior to 3.32.2 have a NULL pointer dereference vulnerability that can be triggered by malicious RDP servers sending a zero-width RDPGFX ResetGraphics PDU. This causes the xfreerdp client to crash due to a failed resize operation that leaves the primary display pointer null, leading to a crash on subsequent bitmap updates.