Freerdp - vulnerabilities (CVEs)

305 CVEs in 1 products, 69 in the last 30 days, newest from 2026-10-21.

Products

• Freerdp - 305 CVEs

Newest CVEs of Freerdp

• CVE-2026-114047 - CVSS 7.6 (high), 2026-10-21: FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no…
• CVE-2026-114045 - CVSS 8.8 (high), 2026-10-21: FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format()…
• CVE-2026-114046 - CVSS 7.1 (high), 2026-10-21: FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange…
• CVE-2026-114044 - CVSS 6.9 (medium), 2026-10-21: FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers…
• CVE-2026-114042 - CVSS 7.1 (high), 2026-10-21: FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when…
• CVE-2026-114043 - CVSS 7.1 (high), 2026-10-21: FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a…
• CVE-2026-114041 - CVSS 6.9 (medium), 2026-10-21: FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf…
• CVE-2026-111881 - CVSS 7.6 (high), 2026-10-17: FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to…
• CVE-2026-111880 - CVSS 8.3 (high), 2026-10-17: FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.…
• CVE-2026-111382 - CVSS 8.8 (high), 2026-10-16: FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious…
• CVE-2026-111381 - CVSS 7.3 (high), 2026-10-16: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via…
• CVE-2026-111380 - CVSS 8.8 (high), 2026-10-16: FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer…
• CVE-2026-111379 - CVSS 7.3 (high), 2026-10-16: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by…
• CVE-2026-111378 - CVSS 8.7 (high), 2026-10-16: FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to…
• CVE-2026-111377 - CVSS 7.1 (high), 2026-10-16: FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits.…
• CVE-2026-111376 - CVSS 5 (medium), 2026-10-16: FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers…
• CVE-2026-111375 - CVSS 9.1 (critical), 2026-10-16: FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap…
• CVE-2026-111374 - CVSS 6 (medium), 2026-10-16: FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised…
• CVE-2026-111373 - CVSS 7.5 (high), 2026-10-16: FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending…
• CVE-2026-110839 - CVSS 7.1 (high), 2026-10-14: FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG…
• CVE-2026-110838 - CVSS 8.7 (high), 2026-10-14: FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers…
• CVE-2026-110837 - CVSS 7.1 (high), 2026-10-14: FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the…
• CVE-2026-110836 - CVSS 7.1 (high), 2026-10-14: FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via…
• CVE-2026-110835 - CVSS 6.3 (medium), 2026-10-14: FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not…
• CVE-2026-110834 - CVSS 7.1 (high), 2026-10-14: FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending…
• CVE-2026-110833 - CVSS 8.2 (high), 2026-10-14: FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers…
• CVE-2026-110832 - CVSS 7.1 (high), 2026-10-14: FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers…
• CVE-2026-110831 - CVSS 5.3 (medium), 2026-10-14: FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive…
• CVE-2026-110830 - CVSS 8.2 (high), 2026-10-14: FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers…
• CVE-2026-110829 - CVSS 7.1 (high), 2026-10-14: FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without…