Every CVE Search/ Get API key

CVE-2024-32662

FreeRDP rdp_redirection_read_base64_wchar out of bound read

7.5 HighFix available

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.77%Up 0.7 points since Apr 24, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

FreeRDP rdp_redirection_read_base64_wchar out of bound read

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
CVE-2024-32662
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2024-30453 7.5

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
EUVD-2024-30453
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
NVD 7.5

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
CVE-2024-32662
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 7.5

FreeRDP rdp_redirection_read_base64_wchar out of bound read

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
CVE-2024-32662
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2024-32662 9.8

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
DEBIAN-CVE-2024-32662
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:9092 7.5

Red Hat Security Advisory: freerdp security update

Record
RHSA-2024:9092
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-32662 9.8

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.

Record
UBUNTU-CVE-2024-32662
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUSN-6759-1 No score

freerdp3 vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service.

Record
USN-6759-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp3
Debian:13
 before 3.5.1+dfsg1-1
3.5.1+dfsg1-1
freerdp3
Debian:14
 before 3.5.1+dfsg1-1
3.5.1+dfsg1-1
freerdp
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
libwinpr
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
libwinpr-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
Show 7 moreShow less
Affected packages
PackageAffectedFixed
freerdp-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
libwinpr-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
libwinpr-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 12 CVEs
 before 2:2.11.7-1.el9
2:2.11.7-1.el9
freerdp3
Ubuntu:24.04:LTS
 before 3.5.1+dfsg1-0ubuntu1, plus listed versions
3.4.0+dfsg1-0ubuntu23.4.0+dfsg1-0ubuntu33.4.0+dfsg1-0ubuntu43.5.0+dfsg1-0ubuntu1
3.5.1+dfsg1-0ubuntu1
freerdp3
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 3.5.1+dfsg1-0ubuntu1, plus listed versions
3.4.0+dfsg1-0ubuntu23.4.0+dfsg1-0ubuntu33.4.0+dfsg1-0ubuntu43.5.0+dfsg1-0ubuntu1
3.5.1+dfsg1-0ubuntu1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-32662 is a high vulnerability (CVSS 7.5) in Freerdp, published April 23, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. Fixed in freerdp3 3.5.1+dfsg1-1.

References

Show 75 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open