FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder

Summary

FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. A malicious RDP server can send a crafted RemoteFX tile with adjacent LL3 coefficients summing beyond signed 16-bit range to abort the client process.

Remediation

1. Inventory every FreeRDP FreeRDP deployment, including staging.
2. Upgrade FreeRDP FreeRDP to 3.32.2.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cg4f-57hc-v7w7
• Advisoryhttps://www.vulncheck.com/advisories/freerdp-3.17.0-before-3.32.2-denial-of-service-via-remotefx-decoder