FreeRDP security vulnerabilities

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.23.0 contained security vulnerabilities. These vulnerabilities stemmed from xfcliprdrprovidedata passing released pDstData to XChangeProperty, which could lead to reuse of a heap...

CVE-2026-25997: Use After Free

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

CVE-2026-25959: Use After Free

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfcliprdrprovidedata passes freed pDstData to XChangeProperty because the cliprdr channel thread calls xfcliprdrserverformatdataresponse which converts and uses the clipboard data without holding any lock,...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

PT-2021-21726

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.4.0 Description The issue is related to missing input checks for a FILECONTENTS SIZE File Contents Request PDU in the wf cliprdr server file contents request function in client/Windows/wf cliprdr.c. This affects...

freerdp: Out of bound read in cliprdr_server_receive_capabilities

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

freerdp: out-of-bounds read in cliprdr_read_format_list function

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read by client or server might read data out-of-bounds. This has been fixed in 2.1.0...

freerdp: Out of bound read in cliprdr_server_receive_capabilities

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

freerdp: out-of-bounds read in cliprdr_read_format_list function

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read by client or server might read data out-of-bounds. This has been fixed in 2.1.0...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31429)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit this vulnerability with a malicious client to randomly...

FreeRDP Resource Management Error Vulnerability (CNVD-2020-31428)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit the vulnerability with the help of specially craft...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31436)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...

DEBIAN-CVE-2020-11085

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read by client or server might read data out-of-bounds. This has been fixed in 2.1.0...

PT-2020-12542 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.1.0 Description: The issue is related to an out-of-bounds read in the cliprdr read format list function. This can cause the clipboard format data to be read out-of-bounds, potentially by either the client or the...