freerdp Vulnerability Advisory Catalog

Total 177 security vulnerabilities recorded for freerdp software and firmware.

← Back to All Vendors
CVE-2026-24679 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array in...

๐Ÿ“… 2026-02-09
CVSS 9.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callba...

๐Ÿ“… 2026-02-09
CVSS 7.5 Dossier →
CVE-2026-24677 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and d...

๐Ÿ“… 2026-02-09
CVSS 9.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the ca...

๐Ÿ“… 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but la...

๐Ÿ“… 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel ...

๐Ÿ“… 2026-02-09
CVSS 7.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2(...

๐Ÿ“… 2026-02-09
CVSS 7.5 Dossier →
CVE-2026-23884 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to ...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-23883 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `poin...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbData`/remaining length and never...

๐Ÿ“… 2026-01-19
CVSS 7.5 Dossier →
CVE-2026-23534 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec ...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-23533 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX Clea...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-23532 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP cl...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-23531 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData` is present, `clear_decompres...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-23530 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWid...

๐Ÿ“… 2026-01-19
CVSS 9.8 Dossier →
CVE-2026-22859 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on serverโ€‘supplie...

๐Ÿ“… 2026-01-14
CVSS 9.1 Dossier →
CVE-2026-22858 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding pat...

๐Ÿ“… 2026-01-14
CVSS 9.1 Dossier →
CVE-2026-22857 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is f...

๐Ÿ“… 2026-01-14
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap useโ€‘a...

๐Ÿ“… 2026-01-14
CVSS 8.1 Dossier →
CVE-2026-22855 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path whe...

๐Ÿ“… 2026-01-14
CVSS 9.1 Dossier →
CVE-2026-22854 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled...

๐Ÿ“… 2026-01-14
CVSS 9.8 Dossier →
CVE-2026-22853 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEARโ€™s NDR array reader does not perform bounds checking on the on...

๐Ÿ“… 2026-01-14
CVSS 9.8 Dossier →
CVE-2026-22852 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in t...

๐Ÿ“… 2026-01-14
CVSS 9.8 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread a...

๐Ÿ“… 2026-01-14
CVSS 5.9 Dossier →
Page 3 of 8 (177 Total Records)