CVE-2024-32658: FreeRDP ExtractRunLengthRegular* out of bound read
Published Apr 23, 2024
·Updated
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
Affected Software
8 affected componentsFixes available
redhat/FreeRDP<3.5.1
3.5.1
FreeRDP freerdp<2.11.7
FreeRDP freerdp>=3.0.0<3.5.1
Fedoraproject Fedora=38
Fedoraproject Fedora=39
Fedoraproject Fedora=40
debian/freerdp2<=2.3.0+dfsg1-2+deb11u1, <=2.10.0+dfsg1-1
2.3.0+dfsg1-2+deb11u3
debian/freerdp3
3.15.0+dfsg-13.15.0+dfsg-2
Remediation
Event History
Apr 23, 2024
CVE Published
via MITRE·05:41 PM
Data Sourced
via MITRE·05:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 28, 2024
Data Sourced
via Launchpad·04:49 PM
Description
Mar 11, 2025
Data Sourced
via Ubuntu·04:35 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32658?
CVE-2024-32658 has been classified as a medium severity vulnerability due to the potential for out-of-bounds read affecting FreeRDP clients.
2
How do I fix CVE-2024-32658?
To fix CVE-2024-32658, upgrade to FreeRDP version 3.5.1 or later.
3
Which versions of FreeRDP are affected by CVE-2024-32658?
FreeRDP clients prior to version 3.5.1 are vulnerable to CVE-2024-32658.
4
Is there a workaround for CVE-2024-32658?
No known workarounds are available for CVE-2024-32658.
5
What types of systems are impacted by CVE-2024-32658?
CVE-2024-32658 affects FreeRDP implementations on various distributions including Ubuntu and Debian.