freerdp3 vulnerabilities (Debian)
248 vulnerabilities.
freerdp3DebianFreeRDP before 3.29.0 TLS Certificate EKU Bypass9.3 Criticalfreerdp3DebianFreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection9.3 Criticalfreerdp3DebianFreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass9.3 Criticalfreerdp3DebianFreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy8.7 Highfreerdp3DebianFreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response8.7 Highfreerdp3DebianFreeRDP before 3.29.0 Improper Certificate Hostname Validation9.3 Criticalfreerdp3DebianFreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF8.7 Highfreerdp3DebianFreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU7.1 Highfreerdp3DebianFreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client7.7 Highfreerdp3DebianFreeRDP: Denial of service through ADPCM frame size calculation6.5 Mediumfreerdp3DebianFreeRDP RDP File Parser Remote Code Execution via CLI Options8.5 Highfreerdp3DebianFreeRDP before 3.28.0 Double-Free via selectedmonitors9.3 Criticalfreerdp3DebianFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common9.3 Criticalfreerdp3DebianFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing8.6 Highfreerdp3DebianOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName6.5 Mediumfreerdp3DebianFreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-235305.1 Mediumfreerdp3DebianFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments5.4 Mediumfreerdp3DebianFreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback8.3 Highfreerdp3DebianFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode7.5 Highfreerdp3DebianFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1 Mediumfreerdp3DebianFreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch8.7 Highfreerdp3DebianFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag8.7 Highfreerdp3DebianFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2 Highfreerdp3DebianFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 Highfreerdp3DebianHeap-buffer-overflow write in planar bitmap decoder7.7 Highfreerdp3DebianFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 Highfreerdp3DebianFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion7.5 Highfreerdp3DebianFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass8.8 Highfreerdp3DebianFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass8.6 Highfreerdp3DebianFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..4.2 Mediumfreerdp3DebianFreeRDP: Possible double free in kerberos_AcceptSecurityContext5.3 Mediumfreerdp3DebianFreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write7.1 Highfreerdp3DebianFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write7.5 Highfreerdp3DebianFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read5.9 Mediumfreerdp3DebianFreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write7.5 Highfreerdp3DebianFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS6.5 Mediumfreerdp3DebianFreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read7.1 Highfreerdp3DebianFreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks6.0 Mediumfreerdp3DebianFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)6.9 Mediumfreerdp3DebianFreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`0.0 Nonefreerdp3DebianFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Criticalfreerdp3DebianFreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks6.5 Mediumfreerdp3DebianFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 06.5 Mediumfreerdp3DebianFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Mediumfreerdp3DebianFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Lowfreerdp3DebianFreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId5.3 Mediumfreerdp3DebianFreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects5.3 Mediumfreerdp3DebianFreeRDP has possible Integer overflow in Stream_EnsureCapacity5.3 Mediumfreerdp3DebianFreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File5.5 Mediumfreerdp3DebianFreeRDP has heap-use-after-free in rail_window_free5.5 Medium- Show moreLoading…