freerdp Vulnerability Advisory Catalog

Total 177 security vulnerabilities recorded for freerdp software and firmware.

← Back to All Vendors
CVE-2026-31806 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, the gdi_surface_bits() function processes SURFACE_BITS_COMMAND mess...

📅 2026-03-13
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of Free...

📅 2026-03-13
CVSS 3.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bitm...

📅 2026-03-13
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AV...

📅 2026-03-13
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless b...

📅 2026-02-25
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24...

📅 2026-02-25
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointe...

📅 2026-02-25
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align(...

📅 2026-02-25
CVSS 6.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle(...

📅 2026-02-25
CVSS 8.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in...

📅 2026-02-25
CVSS 8.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (...

📅 2026-02-25
CVSS 5.3 Dossier →
CVE-2026-25997 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` me...

📅 2026-02-25
CVSS 9.8 Dossier →
CVE-2026-25959 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChan...

📅 2026-02-25
CVSS 9.8 Dossier →
CVE-2026-25955 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` who...

📅 2026-02-25
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfApp...

📅 2026-02-25
CVSS 7.5 Dossier →
CVE-2026-25953 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWin...

📅 2026-02-25
CVSS 9.8 Dossier →
CVE-2026-25952 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` ...

📅 2026-02-25
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_co...

📅 2026-02-25
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 h...

📅 2026-02-25
CVSS 4.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the c...

📅 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it...

📅 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats...

📅 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel call...

📅 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_P...

📅 2026-02-09
CVSS 7.5 Dossier →
Page 2 of 8 (177 Total Records)