Advisories · Technology
FreeRDP.
Every CVE that names FreeRDP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
- FreeRDP
- Authentication bypass
- CVSS 6.1 Medium
FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type
- FreeRDP
- Denial of service
- CVSS 6.3 Medium
FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token
- FreeRDP
- Other injection
- CVSS 7.1 High
FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle
- FreeRDP
- Memory corruption
- CVSS 8.2 High
FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST
- FreeRDP
- Denial of service
- CVSS 5.3 Medium
FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE
- FreeRDP
- CWE-775
- CVSS 8.2 High
FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
- FreeRDP
- Hard-coded credentials
- CVSS 6.0 Medium
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
- FreeRDP
- CWE-757
- CVSS 6.9 Medium
FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
- FreeRDP
- Memory corruption
- CVSS 5.3 Medium
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
- FreeRDP
- Authentication bypass
- CVSS 5.3 Medium
FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
- FreeRDP
- Information disclosure
- CVSS 7.1 High
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
- FreeRDP
- Denial of service
- CVSS 6.0 Medium
FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit
- FreeRDP
- Race condition
- CVSS 7.1 High
FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
- FreeRDP
- Denial of service
- CVSS 5.1 Medium
FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler
- FreeRDP
- Memory corruption
- CVSS 8.7 High
FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
- FreeRDP
- Memory corruption
- CVSS 8.2 High
FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion
- FreeRDP
- Memory corruption
- CVSS 6.1 Medium
FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME
- FreeRDP
- Memory corruption
- CVSS 6.0 Medium
FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry
- FreeRDP
- CWE-129
- CVSS 7.0 High
FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()
- FreeRDP
- CWE-129
- CVSS 6.8 Medium
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing
- FreeRDP
- Memory corruption
- CVSS 6.9 Medium
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName
- FreeRDP
- Memory corruption
- CVSS 2.1 Low
FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName
- FreeRDP
- Path traversal
- CVSS 7.1 High
FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU
- FreeRDP
- Memory corruption
- CVSS 7.4 High
FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request
- FreeRDP
- Weak cryptography or TLS
- CVSS 6.8 Medium
FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert
- FreeRDP
- Broken access control
- CVSS 4.1 Medium
FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File
- FreeRDP
- Broken access control
- CVSS 7.1 High
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
- FreeRDP
- Memory corruption
- CVSS 2.3 Low
FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel
- FreeRDP
- Memory corruption
- CVSS 2.3 Low
FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer
- FreeRDP
- Denial of service
- CVSS 8.7 High
FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc
- FreeRDP
- Memory corruption
- CVSS 5.3 Medium
FreeRDP before 3.31.0 Integer Overflow via audin Apple backends
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP before 3.31.0 Denial of Service via URBDRC
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.31.0 Integer Overflow Double Free
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway
- FreeRDP
- Memory corruption
- CVSS 6.9 Medium
FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index
- FreeRDP
- Memory corruption
- CVSS 2.3 Low
FreeRDP before 3.31.0 Use-After-Free via smartcard worker
- FreeRDP
- Memory corruption
- CVSS 7.1 High
FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC
- FreeRDP
- Memory corruption