Threats tagged 'ghsa-r7gw-v2vh-25mh'

FreeRDP versions prior to 3.32.2 contain a use-after-free vulnerability triggered by malicious RDP servers. The flaw arises from a race condition between the RDPGFX ResetGraphics handler and the planar bitmap decoder when processing compressed bitmaps of 32 bits per pixel or more. This can lead to heap corruption or out-of-bounds memory access in the client.