Skip to content
OpenAdvisories

Package · Debian

freerdp2

319 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-125394 Public exploit

    FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and …

    FreeRDP FreeRDP freerdp2 freerdp3 Debian
  • Medium 6.8
    CVE-2026-109255 Public exploit

    FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

    FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a large sc…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.3
    CVE-2021-41160 Public exploit

    Improper region checks in FreeRDP allow out of bound write to memory

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2020-11019 Public exploit

    Out of bound read in update_recv in FreeRDP

    In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu