Freerdp vulnerabilities
323 CVEs and advisories name Freerdp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109679FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response
- CVE-2026-109678FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA
- CVE-2026-109677FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler
- CVE-2026-109676FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect
- CVE-2026-109257FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
- CVE-2026-109256FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion
- CVE-2026-109255FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length
- CVE-2026-109254FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
- CVE-2026-109253FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read
- CVE-2026-109252FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME
- CVE-2026-109251FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry
- CVE-2026-109250FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()
- CVE-2026-109249FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing
- CVE-2026-109248FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName
- CVE-2026-109247FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName
- CVE-2026-109246FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU
- CVE-2026-109245FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request
- CVE-2026-109244FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert
- CVE-2026-109243FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File
- CVE-2026-109242FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
- CVE-2026-109241FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel
- CVE-2026-109240FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer
- CVE-2026-91964FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
- CVE-2026-91963FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc
- CVE-2026-91962FreeRDP before 3.31.0 Integer Overflow via audin Apple backends
- CVE-2026-91961FreeRDP before 3.31.0 Denial of Service via URBDRC
- CVE-2026-91960FreeRDP before 3.31.0 Integer Overflow Double Free
- CVE-2026-91959FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway
- CVE-2026-91958FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index
- CVE-2026-91957FreeRDP before 3.31.0 Use-After-Free via smartcard worker