freerdp Vulnerability Advisory Catalog

Total 177 security vulnerabilities recorded for freerdp software and firmware.

← Back to All Vendors
CVE-2026-57158 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incomple...

📅 2026-07-10
CVSS 9.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enu...

📅 2026-07-10
CVSS 6.5 Dossier →
CVE-2026-57156 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in upda...

📅 2026-07-10
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx optio...

📅 2026-07-10
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of ch...

📅 2026-07-08
CVSS 7.0 Dossier →
CVE-2026-45700 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when...

📅 2026-05-29
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id ...

📅 2026-05-29
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in t...

📅 2026-05-29
CVSS 8.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP client can trigger a heap-buffer-overflow write in F...

📅 2026-05-29
CVSS 8.8 Dossier →
Component: freerdp

FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap mem...

📅 2026-05-26
CVSS 8.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in `channels...

📅 2026-04-24
CVSS 4.2 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityContex...

📅 2026-03-30
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/pers...

📅 2026-03-30
CVSS 7.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->wid...

📅 2026-03-30
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, ...

📅 2026-03-30
CVSS 5.9 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEntr...

📅 2026-03-30
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via...

📅 2026-03-30
CVSS 6.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 byt...

📅 2026-03-30
CVSS 7.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sendi...

📅 2026-03-30
CVSS 6.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network trigg...

📅 2026-03-30
CVSS 6.5 Dossier →
CVE-2026-31897 UNKNOWN
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar w...

📅 2026-03-13
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders du...

📅 2026-03-13
CVSS 6.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign...

📅 2026-03-13
CVSS 6.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a size_t underflow in the IMA-ADPCM and MS-ADPCM audio decoders lead...

📅 2026-03-13
CVSS 6.5 Dossier →
Page 1 of 8 (177 Total Records)