Lucene search
+L

94 matches found

RedHat Linux
RedHat Linux
•added 2026/04/07 7:47 a.m.•27 views

freerdp: FreeRDP heap-buffer-overflow

A heap based buffer overflow has been discovered in FreeRDP. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS PDUs...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2026/04/01 9:08 a.m.•26 views

freerdp: FreeRDP heap-buffer-overflow

A heap based buffer overflow has been discovered in FreeRDP. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS PDUs...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2026/01/16 12:25 a.m.•11 views

SUSE CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

7.5CVSS7.7AI score0.00428EPSS
SaveExploits1References13
NVD
NVD
•added 2026/01/14 6:16 p.m.•23 views

CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

9.8CVSS0.00428EPSS
SaveExploits1References2
OSV
OSV
•added 2026/01/14 6:16 p.m.•19 views

UBUNTU-CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2026/01/14 5:45 p.m.•11 views

CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1
attackerkb
attackerkb
•added 2026/01/14 5:45 p.m.•11 views

CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/14 5:45 p.m.•4 views

CVE-2026-22852 FreeRDP has a heap-buffer-overflow in audin_process_formats

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

7.7CVSS7.7AI score0.00428EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/14 5:45 p.m.•56 views

CVE-2026-22852 FreeRDP has a heap-buffer-overflow in audin_process_formats

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

7.7CVSS0.00428EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2026/01/14 5:45 p.m.•24 views

CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

9.8CVSS7.7AI score0.00428EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-22852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP...

9.8CVSS7.6AI score0.00428EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•15 views

PT-2026-2930

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description A malicious RDP server can cause a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. The audin process formats function reuses the callback-formats cou...

9.8CVSS7.2AI score0.00703EPSS
SaveExploits6References239
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•28 views

PT-2026-7035

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.22.0 Description FreeRDP, a Remote Desktop Protocol implementation, contains a flaw related to audio format handling. Specifically, the AUDIN format renegotiation process can lead to a use-after-free condition. This...

9.8CVSS7.1AI score0.01934EPSS
SaveExploits4References218
RedhatCVE
RedhatCVE
•added 2025/11/22 8:15 p.m.•25 views

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

6.8CVSS5.8AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/21 8:03 p.m.•52 views

CVE-2025-13524

CVE-2025-13524 affects AWS Wickr, Wickr Gov, and Wickr Enterprise desktop builds prior to 6.62.13 on Windows, macOS, and Linux. The issue is improper resource release in the call termination process, which may allow a call participant to continue receiving audio input from another user after clos...

6.8CVSS5.8AI score0.00245EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•12 views

Amazon Web Services Wickr 安全漏洞

Amazon Web Services Wickr is an end-to-end encryption service from Amazon.com, Inc. A security vulnerability exists in Amazon Web Services Wickr versions prior to 6.62.13 that stems from improper resource release during call termination, which could result in continued receipt of audio input...

6.8CVSS6.6AI score0.00245EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•4 views

CVE-2025-13524: Improper Resource Shutdown or Release

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

6.8CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•15 views

PT-2025-47800

Name of the Vulnerable Software and Affected Versions AWS Wickr versions prior to 6.62.13 Description A flaw exists in the call termination process that may allow a call participant to continue receiving audio input from another user after closing their call window. This issue occurs in AWS Wickr...

6.8CVSS6.5AI score0.00245EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2014-1818

Malware in sbrugna...

7.5CVSS8.1AI score0.01662EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2023-34957

Malicious code in bioql PyPI...

8.1CVSS7.5AI score0.01113EPSS
SaveExploits0References1
Rows per page
Query Builder