# FreeRDP.

Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [FreeRDP has a heap-buffer-overflow in audin_process_formats](https://agentprime.io/advisories/CVE-2026-22852.md)
  `CVE-2026-22852` · CVE record: FreeRDP FreeRDP · CVSS 6.8 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Memory corruption
- [FreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)](https://agentprime.io/advisories/CVE-2026-22851.md)
  `CVE-2026-22851` · CVE record: FreeRDP FreeRDP · CVSS 6.9 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Race condition, Memory corruption
- [Potential Heap Out-of-Bounds Read in freerdp_certificate_data_hash\_ via Unsafe \_snprintf Usage](https://agentprime.io/advisories/CVE-2025-68118.md)
  `CVE-2025-68118` · CVE record: FreeRDP FreeRDP · CVSS 6.6 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Memory corruption
- [FreeRDP rdp_redirection_read_base64_wchar out of bound read](https://agentprime.io/advisories/CVE-2024-32662.md)
  `CVE-2024-32662` · CVE record: FreeRDP FreeRDP · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2024 · Tags: Memory corruption
- [FreeRDP rdp_write_logon_info_v1 NULL access](https://agentprime.io/advisories/CVE-2024-32661.md)
  `CVE-2024-32661` · CVE record: FreeRDP FreeRDP · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2024 · Tags: Memory corruption
- [FreeRDP zgfx_decompress out of memory vulnerability](https://agentprime.io/advisories/CVE-2024-32660.md)
  `CVE-2024-32660` · CVE record: FreeRDP FreeRDP · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2024 · Tags: Denial of service
- [freerdp_image_copy out of bound read](https://agentprime.io/advisories/CVE-2024-32659.md)
  `CVE-2024-32659` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Apr 2024 · Tags: Memory corruption
- [FreeRDP ExtractRunLengthRegular\* out of bound read](https://agentprime.io/advisories/CVE-2024-32658.md)
  `CVE-2024-32658` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Apr 2024 · Tags: Memory corruption
- [FreeRDP Out-Of-Bounds Read in interleaved_decompress](https://agentprime.io/advisories/CVE-2024-32460.md)
  `CVE-2024-32460` · CVE record: FreeRDP FreeRDP · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP Out-Of-Bounds Read in ncrush_decompress](https://agentprime.io/advisories/CVE-2024-32459.md)
  `CVE-2024-32459` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle](https://agentprime.io/advisories/CVE-2024-32458.md)
  `CVE-2024-32458` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP OutOfBound Read in zgfx_decompress_segment](https://agentprime.io/advisories/CVE-2024-32041.md)
  `CVE-2024-32041` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP vulnerable to integer underflow in nsc_rle_decode](https://agentprime.io/advisories/CVE-2024-32040.md)
  `CVE-2024-32040` · CVE record: FreeRDP FreeRDP · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data](https://agentprime.io/advisories/CVE-2024-32039.md)
  `CVE-2024-32039` · CVE record: FreeRDP FreeRDP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2024 · Tags: Memory corruption
- [FreeRDP integer Overflow leading to Heap Overflow](https://agentprime.io/advisories/CVE-2024-22211.md)
  `CVE-2024-22211` · CVE record: FreeRDP FreeRDP · CVSS 3.7 Low · Not analysed yet · Published 19 Jan 2024 · Tags: Memory corruption
- [Out-Of-Bounds Write in FreeRDP](https://agentprime.io/advisories/CVE-2023-40567.md)
  `CVE-2023-40567` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Out-Of-Bounds Write in FreeRDP](https://agentprime.io/advisories/CVE-2023-40569.md)
  `CVE-2023-40569` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Out-Of-Bounds Write in FreeRDP](https://agentprime.io/advisories/CVE-2023-40574.md)
  `CVE-2023-40574` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Out-Of-Bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-40576.md)
  `CVE-2023-40576` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Out-Of-Bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-40575.md)
  `CVE-2023-40575` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Out-Of-Bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-40188.md)
  `CVE-2023-40188` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Use-After-Free in FreeRDP](https://agentprime.io/advisories/CVE-2023-40187.md)
  `CVE-2023-40187` · CVE record: FreeRDP FreeRDP · CVSS 7.3 High · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP](https://agentprime.io/advisories/CVE-2023-40186.md)
  `CVE-2023-40186` · CVE record: FreeRDP FreeRDP · CVSS 6.5 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Integer-Underflow leading to Out-Of-Bound Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-40181.md)
  `CVE-2023-40181` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Missing offset validation leading to Out-of-Bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-39356.md)
  `CVE-2023-39356` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Invalid offset validation leading to Out Of Bound Write in FreeRDP](https://agentprime.io/advisories/CVE-2023-39352.md)
  `CVE-2023-39352` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Missing offset validation leading to Out Of Bound Read in FreeRDP](https://agentprime.io/advisories/CVE-2023-39353.md)
  `CVE-2023-39353` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [FreeRDP Null Pointer Dereference leading denial of service](https://agentprime.io/advisories/CVE-2023-39351.md)
  `CVE-2023-39351` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS](https://agentprime.io/advisories/CVE-2023-39355.md)
  `CVE-2023-39355` · CVE record: FreeRDP FreeRDP · CVSS 7.0 High · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data](https://agentprime.io/advisories/CVE-2023-39354.md)
  `CVE-2023-39354` · CVE record: FreeRDP FreeRDP · CVSS 5.9 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Incorrect offset calculation leading to denial of service in FreeRDP](https://agentprime.io/advisories/CVE-2023-39350.md)
  `CVE-2023-39350` · CVE record: FreeRDP FreeRDP · CVSS 5.9 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [FreeRDP Global-Buffer-Overflow in ncrush_decompress](https://agentprime.io/advisories/CVE-2023-40589.md)
  `CVE-2023-40589` · CVE record: FreeRDP FreeRDP · CVSS 4.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: Memory corruption
- [Missing input length validation in \`drive\` channel in FreeRDP](https://agentprime.io/advisories/CVE-2022-41877.md)
  `CVE-2022-41877` · CVE record: FreeRDP FreeRDP · CVSS 4.6 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Memory corruption
- [Missing path sanitation with \`drive\` channel in FreeRDP](https://agentprime.io/advisories/CVE-2022-39347.md)
  `CVE-2022-39347` · CVE record: FreeRDP FreeRDP · CVSS 2.6 Low · Not analysed yet · Published 16 Nov 2022 · Tags: Path traversal
- [Heap buffer overflow in urbdrc channel](https://agentprime.io/advisories/CVE-2022-39320.md)
  `CVE-2022-39320` · CVE record: FreeRDP FreeRDP · CVSS 5.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Memory corruption
- [Missing length validation in urbdrc channel in FreeRDP](https://agentprime.io/advisories/CVE-2022-39319.md)
  `CVE-2022-39319` · CVE record: FreeRDP FreeRDP · CVSS 4.6 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Memory corruption
- [Division by zero in urbdrc channel in FreeRDP](https://agentprime.io/advisories/CVE-2022-39318.md)
  `CVE-2022-39318` · CVE record: FreeRDP FreeRDP · CVSS 4.8 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Denial of service, CWE-20
- [Out of bounds read in zgfx decoder in FreeRDP](https://agentprime.io/advisories/CVE-2022-39317.md)
  `CVE-2022-39317` · CVE record: FreeRDP FreeRDP · CVSS 4.6 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Memory corruption
- [Out of bound read in FreeRDP](https://agentprime.io/advisories/CVE-2022-39316.md)
  `CVE-2022-39316` · CVE record: FreeRDP FreeRDP · CVSS 4.8 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: Memory corruption
- [FreeRDP may read and display out of bounds data](https://agentprime.io/advisories/CVE-2022-39283.md)
  `CVE-2022-39283` · CVE record: FreeRDP FreeRDP · CVSS 5.9 Medium · Not analysed yet · Published 12 Oct 2022 · Tags: Memory corruption
- [RDP client: Read of uninitialized memory with parallel port redirection](https://agentprime.io/advisories/CVE-2022-39282.md)
  `CVE-2022-39282` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 12 Oct 2022 · Tags: Memory corruption
- [FreeRDP Server authentication might allow invalid credentials to pass](https://agentprime.io/advisories/CVE-2022-24883.md)
  `CVE-2022-24883` · CVE record: FreeRDP FreeRDP · CVSS 7.4 High · Not analysed yet · Published 26 Apr 2022 · Tags: Authentication bypass
- [Server side NTLM does not properly check parameters in FreeRDP](https://agentprime.io/advisories/CVE-2022-24882.md)
  `CVE-2022-24882` · CVE record: FreeRDP FreeRDP · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Apr 2022 · Tags: Authentication bypass
- [Improper region checks in FreeRDP allow out of bound write to memory](https://agentprime.io/advisories/CVE-2021-41160.md)
  `CVE-2021-41160` · CVE record: FreeRDP FreeRDP · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2021 · Tags: Memory corruption
- [Improper client input validation for FreeRDP gateway connections allows to overwrite memory](https://agentprime.io/advisories/CVE-2021-41159.md)
  `CVE-2021-41159` · CVE record: FreeRDP FreeRDP · CVSS 5.8 Medium · Not analysed yet · Published 21 Oct 2021 · Tags: Memory corruption
- [Integer Overflow in FreeRDP](https://agentprime.io/advisories/CVE-2020-15103.md)
  `CVE-2020-15103` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 27 Jul 2020 · Tags: Memory corruption
- [OOB Read in RLEDECOMPRESS in FreeRDP](https://agentprime.io/advisories/CVE-2020-4033.md)
  `CVE-2020-4033` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [Integer casting vulnerability in \`update_recv_secondary_order\` in FreeRDP](https://agentprime.io/advisories/CVE-2020-4032.md)
  `CVE-2020-4032` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 22 Jun 2020 · Tags: CWE-681
- [Use-After-Free in gdi_SelectObject in FreeRDP](https://agentprime.io/advisories/CVE-2020-4031.md)
  `CVE-2020-4031` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [OOB read in \`TrioParse\` in FreeRDP](https://agentprime.io/advisories/CVE-2020-4030.md)
  `CVE-2020-4030` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP](https://agentprime.io/advisories/CVE-2020-11099.md)
  `CVE-2020-11099` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [Out-of-bound read in glyph_cache_put in FreeRDP](https://agentprime.io/advisories/CVE-2020-11098.md)
  `CVE-2020-11098` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [OOB read in ntlm_av_pair_get in FreeRDP](https://agentprime.io/advisories/CVE-2020-11097.md)
  `CVE-2020-11097` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP](https://agentprime.io/advisories/CVE-2020-11096.md)
  `CVE-2020-11096` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [Global OOB read in update_recv_primary_order in FreeRDP](https://agentprime.io/advisories/CVE-2020-11095.md)
  `CVE-2020-11095` · CVE record: FreeRDP FreeRDP · CVSS 3.5 Low · Not analysed yet · Published 22 Jun 2020 · Tags: Memory corruption
- [Out-of-bound read in FreeRDP](https://agentprime.io/advisories/CVE-2020-11089.md)
  `CVE-2020-11089` · CVE record: FreeRDP FreeRDP · CVSS 3.7 Low · Not analysed yet · Published 29 May 2020 · Tags: Memory corruption
- [Out-of-bound read in FreeRDP](https://agentprime.io/advisories/CVE-2020-11088.md)
  `CVE-2020-11088` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 29 May 2020 · Tags: Memory corruption
- [Out-of-bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2020-11087.md)
  `CVE-2020-11087` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 29 May 2020 · Tags: Memory corruption
- [Out-of-bounds Read in FreeRDP \`ntlm_read_ntlm_v2_response\`](https://agentprime.io/advisories/CVE-2020-11086.md)
  `CVE-2020-11086` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 29 May 2020 · Tags: Memory corruption
- [Out-of-bounds Read in FreeRDP](https://agentprime.io/advisories/CVE-2020-11085.md)
  `CVE-2020-11085` · CVE record: FreeRDP FreeRDP · CVSS 2.6 Low · Not analysed yet · Published 29 May 2020 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/freerdp.md>
Older: <https://agentprime.io/advisories/technology/freerdp.md?cursor=WyIyMDIwLTA1LTI5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMC0xMTA4NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=freerdp&cursor=WyIyMDI2LTAxLTE0VDE3OjQ2OjUwLjE1OTAwMFoiLCJDVkUtMjAyNi0yMjg1MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/freerdp/?cursor=WyIyMDI2LTAxLTE0VDE3OjQ2OjUwLjE1OTAwMFoiLCJDVkUtMjAyNi0yMjg1MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.