FreeRDP before version 3.32.2 contains a heap out‑of‑bounds write in its planar codec. The flaw is triggered when the client commits new bitmap dimensions before successfully reallocating the buffer. If a malicious RDP server sends an oversized ResetGraphics PDU followed by a GFX PLANAR command, the client will write beyond its intended memory area, corrupt heap memory, and crash. This is a classic memory corruption issue classified as CWE‑787.

All FreeRDP installations running a version earlier than 3.32.2 are affected. The vulnerability is present in the FreeRDP FreeRDP product line without restriction to specific operating systems.

The CVSS score of 7.1 indicates a high severity impact. EPSS data is not available, and the vulnerability is not yet listed in the CISA KEV catalog, suggesting that widespread exploitation has not yet been observed. However, as the attack requires only a remote RDP server, a remote actor can easily trigger a client crash by sending crafted PDUs. The consequence is a denial of service that can interrupt remote sessions and potentially affect availability of the client machine.