freerdp2 vulnerabilities (Ubuntu)
307 vulnerabilities.
freerdp2UbuntuFreeRDP before 3.31.0 Buffer Over-read via RTS Gateway7.1 Highfreerdp2UbuntuFreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index6.9 Mediumfreerdp2UbuntuFreeRDP before 3.31.0 Use-After-Free via smartcard worker2.3 Lowfreerdp2UbuntuFreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Denial of Service via Desktop Dimensions8.2 Highfreerdp2UbuntuFreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Denial of Service via pool_decode_rect7.1 Highfreerdp2UbuntuFreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound7.1 Highfreerdp2UbuntuFreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass9.2 Criticalfreerdp2UbuntuFreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL7.7 Highfreerdp2UbuntuFreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC7.7 Highfreerdp2UbuntuFreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR7.1 Highfreerdp2UbuntuFreeRDP before 3.31.0 Heap Out-of-Bounds Read via AVC4445.3 Mediumfreerdp2UbuntuFreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory7.1 Highfreerdp2UbuntuFreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)8.3 Highfreerdp2UbuntuFreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`8.3 Highfreerdp2UbuntuFreeRDP before 3.29.0 Integer Overflow via Audio Input Channel7.7 Highfreerdp2UbuntuFreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE5.3 Mediumfreerdp2UbuntuFreeRDP before 3.29.0 Denial of Service via serial DeviceControl5.3 Mediumfreerdp2UbuntuFreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service5.3 Mediumfreerdp2UbuntuFreeRDP before 3.29.0 Use-After-Free via async message proxy8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Use-After-Free via WindowIcon async message8.7 Highfreerdp2UbuntuFreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Path Traversal via drive redirection5.3 Mediumfreerdp2UbuntuFreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure9.3 Criticalfreerdp2UbuntuFreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Denial of Service via smartcard cache8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.2642.4 Lowfreerdp2UbuntuFreeRDP before 3.29.0 NULL Dereference via smartcard cleanup8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Denial of Service via RDPEI PDU8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 TLS Certificate EKU Bypass9.3 Criticalfreerdp2UbuntuFreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection9.3 Criticalfreerdp2UbuntuFreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass9.3 Criticalfreerdp2UbuntuFreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response8.7 Highfreerdp2UbuntuFreeRDP before 3.29.0 Improper Certificate Hostname Validation9.3 Criticalfreerdp2UbuntuFreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF8.7 Highfreerdp2UbuntuFreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU7.1 Highfreerdp2UbuntuFreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client7.7 Highfreerdp2UbuntuFreeRDP: Denial of service through ADPCM frame size calculation6.5 Mediumfreerdp2UbuntuFreeRDP RDP File Parser Remote Code Execution via CLI Options8.5 Highfreerdp2UbuntuFreeRDP before 3.28.0 Double-Free via selectedmonitors9.3 Criticalfreerdp2UbuntuFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common9.3 Criticalfreerdp2UbuntuFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing8.6 Highfreerdp2UbuntuOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName6.5 Mediumfreerdp2UbuntuFreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-235305.1 Medium- Show moreLoading…