freerdp vulnerabilities (openSUSE)
152 vulnerabilities.
-
freerdpopenSUSE FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU 7.1 High -
freerdpopenSUSE FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client 7.7 High -
freerdpopenSUSE FreeRDP: Denial of service through ADPCM frame size calculation 6.5 Medium -
freerdpopenSUSE FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing 8.6 High -
freerdpopenSUSE Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName 6.5 Medium -
freerdpopenSUSE FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530 5.1 Medium -
freerdpopenSUSE FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode 7.5 High -
freerdpopenSUSE FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check 6.1 Medium -
freerdpopenSUSE FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch 8.7 High -
freerdpopenSUSE FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag 8.7 High -
freerdpopenSUSE FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch 7.2 High -
freerdpopenSUSE FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation 8.7 High -
freerdpopenSUSE Heap-buffer-overflow write in planar bitmap decoder 7.7 High -
freerdpopenSUSE FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS 8.8 High -
freerdpopenSUSE FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion 7.5 High -
freerdpopenSUSE FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass 8.8 High -
freerdpopenSUSE FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass 8.6 High -
freerdpopenSUSE FreeRDP: contains_dotdot() off-by-one allows drive channel path traversal via terminal .. 4.2 Medium -
freerdpopenSUSE FreeRDP: Possible double free in kerberos_AcceptSecurityContext 5.3 Medium -
freerdpopenSUSE FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write 7.1 High -
freerdpopenSUSE FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write 7.5 High -
freerdpopenSUSE FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read 5.9 Medium -
freerdpopenSUSE FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write 7.5 High -
freerdpopenSUSE FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS 6.5 Medium -
freerdpopenSUSE FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read 7.1 High -
freerdpopenSUSE FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks 6.0 Medium -
freerdpopenSUSE FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331) 6.9 Medium -
freerdpopenSUSE FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar` 0.0 None -
freerdpopenSUSE FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions 9.3 Critical -
freerdpopenSUSE FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks 6.5 Medium -
freerdpopenSUSE FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 6.5 Medium -
freerdpopenSUSE FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write 6.5 Medium -
freerdpopenSUSE FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library 3.1 Low -
freerdpopenSUSE FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId 5.3 Medium -
freerdpopenSUSE FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects 5.3 Medium -
freerdpopenSUSE FreeRDP has Out-of-bounds Write 8.8 High -
freerdpopenSUSE FreeRDP has Out-of-bounds Write 8.8 High -
freerdpopenSUSE Buffer Overread in FreeRDP Icon Processing 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_clipboard_format_equal 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_ 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage) 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_rail_server_local_move_size 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow) 5.5 Medium -
freerdpopenSUSE FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo 5.5 Medium -
freerdpopenSUSE FreeRDP has global-buffer-overflow in xf_rail_server_execute_result 5.5 Medium -
freerdpopenSUSE FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read 4.3 Medium -
freerdpopenSUSE FreeRDP has a Heap-use-after-free in play_thread 8.7 High -
freerdpopenSUSE FreeRDP has a heap-use-after-free in ainput_send_input_event 8.7 High -
freerdpopenSUSE FreeRDP has a Heap-buffer-overflow in audio_formats_free 8.7 High -
freerdpopenSUSE FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb 8.7 High - Show olderLoading…