FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format

FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine

FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends

FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect

FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag

FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr

FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode

FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS

FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion

FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass

FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass

FreeRDP has Out-of-bounds Write

FreeRDP has Out-of-bounds Write

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

An issue was discovered in FreeRDP before 2.1.1

FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch

FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId

FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects

FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback

FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read

FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read

FreeRDP has a heap-use-after-free in create_irp_thread

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11

FreeRDP RDP File Parser Remote Code Execution via CLI Options

FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard

FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping

FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass

FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy

FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE

FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure

FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions

FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL

FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

FreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check

FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)

FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel

FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow

FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD

FreeRDP before 3.29.0 Use-After-Free via async message proxy

FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message

FreeRDP before 3.29.0 Denial of Service via smartcard cache

FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection

FreeRDP before 3.29.0 Denial of Service via RDPEI PDU

FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup

FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response

FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy

FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF