Freerdp

Freerdp

173 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-24683

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:22:17
  • Zuletzt bearbeitet 10.02.2026 15:03:23

FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading ...

7.5

CVE-2026-24682

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:21:39
  • Zuletzt bearbeitet 10.02.2026 15:04:10

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), leading to out-of-bounds access in audio_formats_free. This vulnerability...

7.5

CVE-2026-24681

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:20:39
  • Zuletzt bearbeitet 10.02.2026 15:06:04

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerabi...

7.5

CVE-2026-24680

  • EPSS 0.42%
  • Veröffentlicht 09.02.2026 18:19:45
  • Zuletzt bearbeitet 10.02.2026 15:06:48

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0.

9.1

CVE-2026-24679

  • EPSS 0.49%
  • Veröffentlicht 09.02.2026 18:19:00
  • Zuletzt bearbeitet 10.02.2026 15:08:26

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, causing an out-of-bounds read in libusb_udev_select_interface. This vul...

7.5

CVE-2026-24678

  • EPSS 0.63%
  • Veröffentlicht 09.02.2026 18:17:27
  • Zuletzt bearbeitet 30.06.2026 03:17:38

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerabili...

9.1

CVE-2026-24677

  • EPSS 0.49%
  • Veröffentlicht 09.02.2026 18:16:44
  • Zuletzt bearbeitet 10.02.2026 15:09:02

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnera...

7.5

CVE-2026-24676

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:15:33
  • Zuletzt bearbeitet 10.02.2026 15:04:59

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin->format, leading to a use after free in audio_format_compatible. ...

7.5

CVE-2026-24675

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:14:40
  • Zuletzt bearbeitet 10.02.2026 15:05:31

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vu...

7.5

CVE-2026-24491

  • EPSS 0.47%
  • Veröffentlicht 09.02.2026 18:13:44
  • Zuletzt bearbeitet 10.02.2026 15:06:24

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fix...