Advisories · Technology

FreeRDP.

Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-22852 CVE record

CVSS 6.8 Medium

FreeRDP has a heap-buffer-overflow in audin_process_formats
- FreeRDP
- Memory corruption
Not analysed yet 14 Jan 2026
CVE-2026-22851 CVE record

CVSS 6.9 Medium

FreeRDP RDPGFX ResetGraphics race leads to use-after-free in SDL client (sdl->primary)
- FreeRDP
- Race condition
- Memory corruption
Not analysed yet 14 Jan 2026
CVE-2025-68118 CVE record

CVSS 6.6 Medium

Potential Heap Out-of-Bounds Read in freerdp_certificate_data_hash_ via Unsafe _snprintf Usage
- FreeRDP
- Memory corruption
Not analysed yet 17 Dec 2025
CVE-2024-32662 CVE record

CVSS 7.5 High

FreeRDP rdp_redirection_read_base64_wchar out of bound read
- FreeRDP
- Memory corruption
Not analysed yet 23 Apr 2024
CVE-2024-32661 CVE record

CVSS 7.5 High

FreeRDP rdp_write_logon_info_v1 NULL access
- FreeRDP
- Memory corruption
Not analysed yet 23 Apr 2024
CVE-2024-32660 CVE record

CVSS 7.5 High

FreeRDP zgfx_decompress out of memory vulnerability
- FreeRDP
- Denial of service
Not analysed yet 23 Apr 2024
CVE-2024-32659 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

freerdp_image_copy out of bound read
- FreeRDP
- Memory corruption
Not analysed yet 23 Apr 2024
CVE-2024-32658 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FreeRDP ExtractRunLengthRegular* out of bound read
- FreeRDP
- Memory corruption
Not analysed yet 23 Apr 2024
CVE-2024-32460 CVE record

CVSS 8.1 High

FreeRDP Out-Of-Bounds Read in interleaved_decompress
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-32459 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FreeRDP Out-Of-Bounds Read in ncrush_decompress
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-32458 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-32041 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FreeRDP OutOfBound Read in zgfx_decompress_segment
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-32040 CVE record

CVSS 8.1 High

FreeRDP vulnerable to integer underflow in nsc_rle_decode
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-32039 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data
- FreeRDP
- Memory corruption
Not analysed yet 22 Apr 2024
CVE-2024-22211 CVE record

CVSS 3.7 Low

FreeRDP integer Overflow leading to Heap Overflow
- FreeRDP
- Memory corruption
Not analysed yet 19 Jan 2024
CVE-2023-40567 CVE record

CVSS 6.5 Medium

Out-Of-Bounds Write in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40569 CVE record

CVSS 6.5 Medium

Out-Of-Bounds Write in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40574 CVE record

CVSS 6.5 Medium

Out-Of-Bounds Write in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40576 CVE record

CVSS 5.3 Medium

Out-Of-Bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40575 CVE record

CVSS 5.3 Medium

Out-Of-Bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40188 CVE record

CVSS 5.3 Medium

Out-Of-Bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40187 CVE record

CVSS 7.3 High

Use-After-Free in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40186 CVE record

CVSS 6.5 Medium

IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40181 CVE record

CVSS 5.3 Medium

Integer-Underflow leading to Out-Of-Bound Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39356 CVE record

CVSS 5.3 Medium

Missing offset validation leading to Out-of-Bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39352 CVE record

CVSS 5.3 Medium

Invalid offset validation leading to Out Of Bound Write in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39353 CVE record

CVSS 5.3 Medium

Missing offset validation leading to Out Of Bound Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39351 CVE record

CVSS 5.3 Medium

FreeRDP Null Pointer Dereference leading denial of service
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39355 CVE record

CVSS 7.0 High

FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39354 CVE record

CVSS 5.9 Medium

FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-39350 CVE record

CVSS 5.9 Medium

Incorrect offset calculation leading to denial of service in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2023-40589 CVE record

CVSS 4.3 Medium

FreeRDP Global-Buffer-Overflow in ncrush_decompress
- FreeRDP
- Memory corruption
Not analysed yet 31 Aug 2023
CVE-2022-41877 CVE record

CVSS 4.6 Medium

Missing input length validation in `drive` channel in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 16 Nov 2022
CVE-2022-39347 CVE record

CVSS 2.6 Low

Missing path sanitation with `drive` channel in FreeRDP
- FreeRDP
- Path traversal
Not analysed yet 16 Nov 2022
CVE-2022-39320 CVE record

CVSS 5.5 Medium

Heap buffer overflow in urbdrc channel
- FreeRDP
- Memory corruption
Not analysed yet 16 Nov 2022
CVE-2022-39319 CVE record

CVSS 4.6 Medium

Missing length validation in urbdrc channel in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 16 Nov 2022
CVE-2022-39318 CVE record

CVSS 4.8 Medium

Division by zero in urbdrc channel in FreeRDP
- FreeRDP
- Denial of service
- CWE-20
Not analysed yet 16 Nov 2022
CVE-2022-39317 CVE record

CVSS 4.6 Medium

Out of bounds read in zgfx decoder in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 16 Nov 2022
CVE-2022-39316 CVE record

CVSS 4.8 Medium

Out of bound read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 16 Nov 2022
CVE-2022-39283 CVE record

CVSS 5.9 Medium

FreeRDP may read and display out of bounds data
- FreeRDP
- Memory corruption
Not analysed yet 12 Oct 2022
CVE-2022-39282 CVE record

CVSS 3.5 Low

RDP client: Read of uninitialized memory with parallel port redirection
- FreeRDP
- Memory corruption
Not analysed yet 12 Oct 2022
CVE-2022-24883 CVE record

CVSS 7.4 High

FreeRDP Server authentication might allow invalid credentials to pass
- FreeRDP
- Authentication bypass
Not analysed yet 26 Apr 2022
CVE-2022-24882 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Server side NTLM does not properly check parameters in FreeRDP
- FreeRDP
- Authentication bypass
Not analysed yet 26 Apr 2022
CVE-2021-41160 CVE record

CVSS 5.3 Medium

Improper region checks in FreeRDP allow out of bound write to memory
- FreeRDP
- Memory corruption
Not analysed yet 21 Oct 2021
CVE-2021-41159 CVE record

CVSS 5.8 Medium

Improper client input validation for FreeRDP gateway connections allows to overwrite memory
- FreeRDP
- Memory corruption
Not analysed yet 21 Oct 2021
CVE-2020-15103 CVE record

CVSS 3.5 Low

Integer Overflow in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 27 Jul 2020
CVE-2020-4033 CVE record

CVSS 3.1 Low

OOB Read in RLEDECOMPRESS in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-4032 CVE record

CVSS 3.1 Low

Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP
- FreeRDP
- CWE-681
Not analysed yet 22 Jun 2020
CVE-2020-4031 CVE record

CVSS 3.5 Low

Use-After-Free in gdi_SelectObject in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-4030 CVE record

CVSS 3.5 Low

OOB read in `TrioParse` in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11099 CVE record

CVSS 3.5 Low

OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11098 CVE record

CVSS 3.5 Low

Out-of-bound read in glyph_cache_put in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11097 CVE record

CVSS 3.5 Low

OOB read in ntlm_av_pair_get in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11096 CVE record

CVSS 3.5 Low

Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11095 CVE record

CVSS 3.5 Low

Global OOB read in update_recv_primary_order in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 22 Jun 2020
CVE-2020-11089 CVE record

CVSS 3.7 Low

Out-of-bound read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 29 May 2020
CVE-2020-11088 CVE record

CVSS 3.1 Low

Out-of-bound read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 29 May 2020
CVE-2020-11087 CVE record

CVSS 3.1 Low

Out-of-bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 29 May 2020
CVE-2020-11086 CVE record

CVSS 3.1 Low

Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`
- FreeRDP
- Memory corruption
Not analysed yet 29 May 2020
CVE-2020-11085 CVE record

CVSS 2.6 Low

Out-of-bounds Read in FreeRDP
- FreeRDP
- Memory corruption
Not analysed yet 29 May 2020