FR
Product
FreeRDP
305
CVEs
0
On KEV
9.8
Max CVSS
69
New 30D
Severity mix
Critical 68High 96Medium 120Low 19
Watch
Add FreeRDP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33986 | 7.5 | Mar 30 | FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write Affected: < 3.24.2 |
| CVE-2026-33984 | 7.5 | Mar 30 | FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write Affected: < 3.24.2 |
| CVE-2026-31884 | 7.5 | Mar 13 | FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 Affected: < 3.24.0 |
| CVE-2026-27951 | 7.5 | Feb 25 | FreeRDP has possible Integer overflow in Stream_EnsureCapacity Affected: < 3.23.0 |
| CVE-2026-27950 | 7.5 | Feb 25 | FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File Affected: < 3.23.0 |
| CVE-2026-26986 | 7.5 | Feb 25 | FreeRDP has heap-use-after-free in rail_window_free Affected: < 3.23.0 |
| CVE-2026-25954 | 7.5 | Feb 25 | FreeRDP has heap-use-after-free in xf_rail_server_local_move_size Affected: < 3.23.0 |
| CVE-2026-25942 | 7.5 | Feb 25 | FreeRDP has global-buffer-overflow in xf_rail_server_execute_result Affected: < 3.23.0 |
| CVE-2026-24684 | 7.5 | Feb 9 | FreeRDP has a Heap-use-after-free in play_thread Affected: < 3.22.0 |
| CVE-2026-24683 | 7.5 | Feb 9 | FreeRDP has a heap-use-after-free in ainput_send_input_event Affected: < 3.22.0 |
| CVE-2026-24682 | 7.5 | Feb 9 | FreeRDP has a Heap-buffer-overflow in audio_formats_free Affected: < 3.22.0 |
| CVE-2026-24681 | 7.5 | Feb 9 | FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb Affected: < 3.22.0 |
| CVE-2026-24680 | 7.5 | Feb 9 | FreeRDP has a heap-use-after-free in update_pointer_new(SDL) Affected: < 3.22.0 |
| CVE-2026-24678 | 7.5 | Feb 9 | FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread Affected: < 3.22.0 |
| CVE-2026-24676 | 7.5 | Feb 9 | FreeRDP has a heap-use-after-free in audio_format_compatible Affected: < 3.22.0 |
| CVE-2026-24675 | 7.5 | Feb 9 | FreeRDP has a Heap-use-after-free in urb_select_interface Affected: < 3.22.0 |
| CVE-2026-24491 | 7.5 | Feb 9 | FreeRDP has a heap-use-after-free in video_timer Affected: < 3.22.0 |
| CVE-2026-23948 | 7.5 | Feb 9 | FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() Affected: < 3.22.0 |
| CVE-2026-23732 | 7.5 | Jan 19 | FreeRDP has heap-buffer-overflow in Glyph_Alloc Affected: < 3.21.0 |
| CVE-2024-32661 | 7.5 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 3.5.1 |
| CVE-2024-32660 | 7.5 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: before 2.11.7; 3.0.0 before 3.5.1 |
| CVE-2023-40576 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 3.0.0; 3.0.0 |
| CVE-2023-39354 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39351 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-39350 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2023-40589 | 7.5 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: before 2.11.0; 3.0.0; 3.0.0 |
| CVE-2022-39283 | 7.5 | Oct 12 | FreeRDP may read and display out of bounds data Affected: <= 2.8.0 |
| CVE-2022-39282 | 7.5 | Oct 12 | RDP client: Read of uninitialized memory with parallel port redirection Affected: <= 2.8.0 |
| CVE-2022-24882 | 7.5 | Apr 26 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP) Affected: before 2.7.0 |
| CVE-2020-4031 | 7.5 | Jun 22 | In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject Affected: before 2.1.2 |
| CVE-2019-17178 | 7.5 | Oct 4 | HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer… Affected: through 1.0.2; 1.1.0 |
| CVE-2019-17177 | 7.5 | Oct 4 | libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used… Affected: through 1.0.2; 1.1.0; 1.1.0; 2.0.0; 2.0.0; 2.0.0; +3 more |
| CVE-2018-8789 | 7.5 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault) Affected: through 1.2.0; 2.0.0; 2.0.0; 2.0.0 |
| CVE-2013-4119 | 7.5 | Oct 3 | FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication… Affected: through 1.0.2 |
| CVE-2013-4118 | 7.5 | Oct 3 | FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors Affected: through 1.0.2 |
| CVE-2026-111880 | 7.4 | Oct 17 | FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset Affected: 2.0.0 before 3.32.0 |
| CVE-2026-111381 | 7.3 | Oct 16 | FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser Affected: before 3.32.0 |
| CVE-2026-111379 | 7.3 | Oct 16 | FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 Affected: before 3.32.0 |
| CVE-2026-64621 | 7.3 | Jul 20 | FreeRDP before 3.28.0 Double-Free via selectedmonitors Affected: before 3.28.0 |
| CVE-2026-110839 | 7.1 | Oct 14 | FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data Affected: 3.3.0 before 3.32.0 |
| CVE-2026-110837 | 7.1 | Oct 14 | FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding Affected: 2.0.0 before 3.32.0 |
| CVE-2026-109242 | 7.1 | Oct 12 | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade Affected: before 3.0.0; 3.6.0 before 3.32.0 |
| CVE-2026-55564 | 7.1 | Aug 19 | FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments Affected: < 3.27.0 |
| CVE-2026-33985 | 7.1 | Mar 30 | FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read Affected: < 3.24.2 |
| CVE-2020-13396 | 7.1 | May 22 | An issue was discovered in FreeRDP before 2.1.1 Affected: before 2.1.1 |
| CVE-2017-2834 | 7.0 | Apr 24 | An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11 Affected: 2.0.0 |
