freerdp2 vulnerabilities (Debian)
319 vulnerabilities.
freerdp2DebianFreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU7.1 Highfreerdp2DebianFreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client7.7 Highfreerdp2DebianFreeRDP: Denial of service through ADPCM frame size calculation6.5 Mediumfreerdp2DebianFreeRDP RDP File Parser Remote Code Execution via CLI Options8.5 Highfreerdp2DebianFreeRDP before 3.28.0 Double-Free via selectedmonitors9.3 Criticalfreerdp2DebianFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common9.3 Criticalfreerdp2DebianFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing8.6 Highfreerdp2DebianOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName6.5 Mediumfreerdp2DebianFreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-235305.1 Mediumfreerdp2DebianFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments5.4 Mediumfreerdp2DebianFreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback8.3 Highfreerdp2DebianFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode7.5 Highfreerdp2DebianFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1 Mediumfreerdp2DebianFreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch8.7 Highfreerdp2DebianFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag8.7 Highfreerdp2DebianFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2 Highfreerdp2DebianFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 Highfreerdp2DebianHeap-buffer-overflow write in planar bitmap decoder7.7 Highfreerdp2DebianFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 Highfreerdp2DebianFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion7.5 Highfreerdp2DebianFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass8.8 Highfreerdp2DebianFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass8.6 Highfreerdp2DebianFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..4.2 Mediumfreerdp2DebianFreeRDP: Possible double free in kerberos_AcceptSecurityContext5.3 Mediumfreerdp2DebianFreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write7.1 Highfreerdp2DebianFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write7.5 Highfreerdp2DebianFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read5.9 Mediumfreerdp2DebianFreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write7.5 Highfreerdp2DebianFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS6.5 Mediumfreerdp2DebianFreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read7.1 Highfreerdp2DebianFreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks6.0 Mediumfreerdp2DebianFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)6.9 Mediumfreerdp2DebianFreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`0.0 Nonefreerdp2DebianFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Criticalfreerdp2DebianFreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks6.5 Mediumfreerdp2DebianFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 06.5 Mediumfreerdp2DebianFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Mediumfreerdp2DebianFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Lowfreerdp2DebianFreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId5.3 Mediumfreerdp2DebianFreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects5.3 Mediumfreerdp2DebianFreeRDP has possible Integer overflow in Stream_EnsureCapacity5.3 Mediumfreerdp2DebianFreeRDP has heap-use-after-free in rail_window_free5.5 Mediumfreerdp2DebianFreeRDP has Out-of-bounds Write8.8 Highfreerdp2DebianFreeRDP has Out-of-bounds Write8.8 Highfreerdp2DebianFreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)5.0 Mediumfreerdp2DebianBuffer Overread in FreeRDP Icon Processing5.5 Mediumfreerdp2DebianFreeRDP has heap-use-after-free in xf_clipboard_format_equal5.5 Mediumfreerdp2DebianFreeRDP has heap-use-after-free in xf_cliprdr_provide_data_5.5 Mediumfreerdp2DebianFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)5.5 Mediumfreerdp2DebianFreeRDP has heap-use-after-free in xf_rail_server_local_move_size5.5 Medium- Show moreLoading…