Skip to content
OpenAdvisories

Package · Ubuntu

freerdp2

304 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-109255 Public exploit

    FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

    FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a large sc…

  • Medium 5.3
    CVE-2021-41160 Public exploit

    Improper region checks in FreeRDP allow out of bound write to memory

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…

  • Medium 4.3
    CVE-2020-11019 Public exploit

    Out of bound read in update_recv in FreeRDP

    In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.