CVE-2024-32039

Summary

CVE-2024-32039 is a vulnerability affecting FreeRDP, a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version prior to 3.5.0 or 2.11.6 are vulnerable to an integer overflow and out-of-bounds write. The issue can be patched by updating to version 3.5.0 or 2.11.6, and as a workaround, users can deactivate the `/gfx` options by using `/bpp:32` or `/rfx`. This vulnerability has a base severity rating of CRITICAL, with high impact on integrity and confidentiality, and it poses a potential danger to organizations as it allows remote attackers to execute arbitrary code on affected systems through network access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.