FreeRDP is a free implementation of the Remote Desktop Protocol , released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix: * freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update function * freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress function * freerdp: Out-of-bounds write in nsc_rle_decode function For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.