ID:9845 - Exploit for Out-of-bounds read in FreeRDP - CVE-2024-32459

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in ncrush_decompress. A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system.

Remediation