libwinpr vulnerabilities (Red Hat)
155 vulnerabilities.
-
libwinprRed Hat FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken 8.7 High -
libwinprRed Hat FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Integer Overflow Double Free 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound 7.1 High -
libwinprRed Hat FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass 9.2 Critical -
libwinprRed Hat FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC 7.7 High -
libwinprRed Hat FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics 7.1 High -
libwinprRed Hat FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory 7.1 High -
libwinprRed Hat FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`) 8.3 High -
libwinprRed Hat FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage` 8.3 High -
libwinprRed Hat FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel 7.7 High -
libwinprRed Hat Important: freerdp security update 5.4 Medium -
libwinprRed Hat FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message 8.7 High -
libwinprRed Hat FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 Denial of Service via smartcard cache 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 Denial of Service via RDPEI PDU 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection 9.3 Critical -
libwinprRed Hat FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response 8.7 High -
libwinprRed Hat FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF 8.7 High -
libwinprRed Hat FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU 7.1 High -
libwinprRed Hat FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client 7.7 High -
libwinprRed Hat FreeRDP RDP File Parser Remote Code Execution via CLI Options 8.5 High -
libwinprRed Hat FreeRDP before 3.28.0 Double-Free via selectedmonitors 9.3 Critical -
libwinprRed Hat FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common 9.3 Critical -
libwinprRed Hat FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode 7.5 High -
libwinprRed Hat FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch 8.7 High -
libwinprRed Hat FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag 8.7 High -
libwinprRed Hat FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch 7.2 High -
libwinprRed Hat Heap-buffer-overflow write in planar bitmap decoder 7.7 High -
libwinprRed Hat FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS 8.8 High -
libwinprRed Hat FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion 7.5 High -
libwinprRed Hat FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass 8.8 High -
libwinprRed Hat FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass 8.6 High -
libwinprRed Hat FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write 7.1 High -
libwinprRed Hat FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read 5.9 Medium -
libwinprRed Hat FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write 7.5 High -
libwinprRed Hat FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS 6.5 Medium -
libwinprRed Hat FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read 7.1 High -
libwinprRed Hat FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions 9.3 Critical -
libwinprRed Hat FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks 6.5 Medium -
libwinprRed Hat FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 6.5 Medium -
libwinprRed Hat FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write 6.5 Medium -
libwinprRed Hat FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId 5.3 Medium - Show olderLoading…