Freerdp vulnerabilities
323 CVEs and advisories name Freerdp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121398FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module
- CVE-2026-121397FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()
- CVE-2026-121396FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion
- CVE-2026-121395FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder
- CVE-2026-121394FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder
- CVE-2026-121393FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion
- CVE-2026-121392FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate
- CVE-2026-121391FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE
- CVE-2026-121390FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
- CVE-2026-121389FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging
- CVE-2026-121388FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST
- CVE-2026-121387FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder
- CVE-2026-121386FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers
- CVE-2026-114047FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation
- CVE-2026-114046FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard
- CVE-2026-114045FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format
- CVE-2026-114044FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics Pipeline
- CVE-2026-114043Vulnerability in FreeRDP
- CVE-2026-114042FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU
- CVE-2026-114041FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message
- CVE-2026-111881FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard
- CVE-2026-111880FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset
- CVE-2026-111382FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
- CVE-2026-111381FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
- CVE-2026-111380FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple Backends
- CVE-2026-111379FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
- CVE-2026-111378FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
- CVE-2026-111377FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
- CVE-2026-111376FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE
- CVE-2026-111375FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title