Advisories · Technology
FreeRDP.
Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
- FreeRDP
- Memory corruption
- CVSS 8.2 High
FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
- FreeRDP
- Race condition
- CVSS 7.2 High
FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
- FreeRDP
- Memory corruption
- CVSS 8.2 High
FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
- FreeRDP
- Race condition
- CVSS 8.7 High
FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
- FreeRDP
- Denial of service
- CVSS 8.7 High
FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race
- FreeRDP
- Race condition
- CVSS 8.7 High
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec
- FreeRDP
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
- FreeRDP
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly
- FreeRDP
- Denial of service
- CVSS 2.3 Low
FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry
- FreeRDP
- CWE-20
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2
- FreeRDP
- Denial of service
- CVSS 8.2 High
FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token
- FreeRDP
- Denial of service
- CVSS 6.0 Medium
FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel
- FreeRDP
- Race condition
- CVSS 7.1 High
FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel
- FreeRDP
- CWE-20
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics
- FreeRDP
- Memory corruption
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length
- FreeRDP
- Denial of service
- CVSS 8.2 High
FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module
- FreeRDP
- Memory corruption
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()
- FreeRDP
- Memory corruption
- CVSS 5.3 Medium
FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion
- FreeRDP
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate
- FreeRDP
- Weak cryptography or TLS
- CVSS 5.3 Medium
FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
- FreeRDP
- Denial of service
- CVSS 2.3 Low
FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers
- FreeRDP
- CWE-248
- CVSS 7.6 High
FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation
- FreeRDP
- Weak cryptography or TLS
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format
- FreeRDP
- Memory corruption
- CVSS 6.9 Medium
FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline
- FreeRDP
- Memory corruption
- CVSS 7.1 High
Vulnerability in FreeRDP
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU
- FreeRDP
- Memory corruption
- CVSS 6.9 Medium
FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message
- FreeRDP
- Memory corruption
- CVSS 7.2 High
FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard
- FreeRDP
- Memory corruption
- CVSS 8.3 High
FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
- FreeRDP
- Memory corruption
- CVSS 7.0 High
FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends
- FreeRDP
- Memory corruption
- CVSS 7.0 High
FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
- FreeRDP
- Denial of service
- CVSS 2.3 Low
FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE
- FreeRDP
- Memory corruption
- CVSS 6.3 Medium
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest
- FreeRDP
- CWE-20