Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.5.1, a malicious server can crash the FreeRDP client by sending invalid huge allocation size. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

INFO

Published Date :

2024-04-23T20:03:28.529Z

Last Modified :

2025-11-03T20:37:27.005Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-32660 vulnerability.

Vendors Products
Fedoraproject
  • Fedora
Freerdp
  • Freerdp
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-32660.

URL Resource
https://github.com/FreeRDP/FreeRDP/commit/5e5d27cf310e4c10b854be7667bfb7a5d774eb47 cve-icon cve-icon
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mxv6-2cw6-m3mx cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/5JL476WVJSIE7SBUKVJRVA6A52V2HOLZ/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/7SIS6NUNLUBOV4CPCSWKDE6T6C2W3WTR/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/PX3U6YPZQ7PEJBVKSBUOLWVH7DHROHY5/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZKI4UISUXYNBPN4K6TIQKDRTIJ6CDCKJ/ cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-32660 cve-icon
https://oss-fuzz.com/testcase-detail/5559242514825216 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-32660 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact