freerdp3 vulnerabilities (Ubuntu)
242 vulnerabilities.
freerdp3UbuntuFreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common9.3 Criticalfreerdp3UbuntuFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing8.6 Highfreerdp3UbuntuOut-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName6.5 Mediumfreerdp3UbuntuFreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-235305.1 Mediumfreerdp3UbuntuFreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments5.4 Mediumfreerdp3UbuntuFreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback8.3 Highfreerdp3UbuntuFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode7.5 Highfreerdp3UbuntuFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1 Mediumfreerdp3UbuntuFreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch8.7 Highfreerdp3UbuntuFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag8.7 Highfreerdp3UbuntuFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2 Highfreerdp3UbuntuFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 Highfreerdp3UbuntuHeap-buffer-overflow write in planar bitmap decoder7.7 Highfreerdp3UbuntuFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 Highfreerdp3UbuntuFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion7.5 Highfreerdp3UbuntuFreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass8.8 Highfreerdp3UbuntuFreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass8.6 Highfreerdp3UbuntuFreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal ..4.2 Mediumfreerdp3UbuntuFreeRDP: Possible double free in kerberos_AcceptSecurityContext5.3 Mediumfreerdp3UbuntuFreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write7.1 Highfreerdp3UbuntuFreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write7.5 Highfreerdp3UbuntuFreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read5.9 Mediumfreerdp3UbuntuFreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write7.5 Highfreerdp3UbuntuFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS6.5 Mediumfreerdp3UbuntuFreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read7.1 Highfreerdp3UbuntuFreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks6.0 Mediumfreerdp3UbuntuFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)6.9 Mediumfreerdp3Ubuntufreerdp3 regressionNo scorefreerdp3UbuntuFreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`0.0 Nonefreerdp3UbuntuFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions9.3 Criticalfreerdp3UbuntuFreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks6.5 Mediumfreerdp3UbuntuFreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 06.5 Mediumfreerdp3UbuntuFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Mediumfreerdp3UbuntuFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Lowfreerdp3UbuntuFreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId5.3 Mediumfreerdp3UbuntuFreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects5.3 Mediumfreerdp3UbuntuFreeRDP has possible Integer overflow in Stream_EnsureCapacity5.3 Mediumfreerdp3UbuntuFreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in rail_window_free5.5 Mediumfreerdp3UbuntuFreeRDP has Out-of-bounds Write8.8 Highfreerdp3UbuntuFreeRDP has Out-of-bounds Write8.8 Highfreerdp3UbuntuFreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)5.0 Mediumfreerdp3UbuntuBuffer Overread in FreeRDP Icon Processing5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_clipboard_format_equal5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_cliprdr_provide_data_5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_rail_server_local_move_size5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)5.5 Mediumfreerdp3UbuntuFreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo5.5 Mediumfreerdp3UbuntuFreeRDP has global-buffer-overflow in xf_rail_server_execute_result5.5 Medium- Show moreLoading…