Homepage

Out-of-bounds Read The advisory has been revoked - it doesn't affect any version of package freerdp3  (opens in a new tab)

Threat Intelligence

EPSS
1.95% (78th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2604-FREERDP3-16230477
  • published24 Apr 2026
  • disclosed22 Apr 2024
Report a new vulnerability Found a mistake?

Introduced: 22 Apr 2024

CVE-2024-32041  (opens in a new tab)
CWE-125  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:26.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream freerdp3 package and not the freerdp3 package as distributed by Ubuntu.

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate /gfx (on by default, set /bpp or /rfx options instead.

References