CVE-2024-32658

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

References

Affected packages

Git / github.com/freerdp/freerdp

Affected ranges

Type: GIT
Repo: https://github.com/freerdp/freerdp
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

1a755d898ddc028cc818d0dd9d49d5acff4c44bf

Affected versions

1.*

1.0-beta1

1.0-beta2

1.0-beta3

1.0-beta4

1.0-beta5

1.0.0

1.0.1

1.1.0-beta+2013071101

1.1.0-beta1

1.1.0-beta1+android2

1.1.0-beta1+android3

1.1.0-beta1+android4

1.1.0-beta1+android5

1.1.0-beta1+ios1

1.1.0-beta1+ios2

1.1.0-beta1+ios3

1.1.0-beta1+ios4

1.2.0-beta1+android7

1.2.0-beta1+android9

2.*

2.0.0

2.0.0-beta1+android10

2.0.0-beta1+android11

2.0.0-rc0

2.0.0-rc1

2.0.0-rc2

2.0.0-rc3

2.0.0-rc4

3.*

3.0.0

3.0.0-beta1

3.0.0-beta2

3.0.0-beta3

3.0.0-beta4

3.0.0-rc0

3.1.0

3.2.0

3.3.0

3.4.0

3.5.0

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 338.0,
                "function_hash": "186793124219071166586429419300193128585"
            },
            "signature_type": "Function",
            "signature_version": "v1",
            "id": "CVE-2024-32658-43372939",
            "target": {
                "file": "libfreerdp/codec/interleaved.c",
                "function": "ExtractRunLengthMegaMega"
            },
            "source": "https://github.com/freerdp/freerdp/commit/1a755d898ddc028cc818d0dd9d49d5acff4c44bf",
            "deprecated": false
        },
        {
            "digest": {
                "line_hashes": [
                    "317051828234758370471526761738468696915",
                    "288613585368904614947338410449055994366",
                    "210452868770616871294584505579394420740",
                    "324422498513853662364036014075557738798",
                    "52745104370846841870886773199565104577",
                    "120966898695122949459371627640518800765",
                    "39688162360168337846824028198307631294",
                    "217918570347207610679578198123935041180"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "signature_version": "v1",
            "id": "CVE-2024-32658-4ebde332",
            "target": {
                "file": "libfreerdp/codec/interleaved.c"
            },
            "source": "https://github.com/freerdp/freerdp/commit/1a755d898ddc028cc818d0dd9d49d5acff4c44bf",
            "deprecated": false
        },
        {
            "digest": {
                "length": 379.0,
                "function_hash": "294261491965962563606900617485581344220"
            },
            "signature_type": "Function",
            "signature_version": "v1",
            "id": "CVE-2024-32658-65911c44",
            "target": {
                "file": "libfreerdp/codec/interleaved.c",
                "function": "ExtractRunLengthRegularFgBg"
            },
            "source": "https://github.com/freerdp/freerdp/commit/1a755d898ddc028cc818d0dd9d49d5acff4c44bf",
            "deprecated": false
        }
    ]
}