Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bounds seek in the updatereadsynchronize function...

Privilege Escalation

freerdp is vulnerable to privilege escalation. The vulnerability exists through an out of bounds read in the updatereadbitmapdata function...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in rfxprocessmessagetileset...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through a double free in the updatereadcachebitmapv3order function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an unchecked read of array offset in rdpsndrecvwave2pdu...

Arbitrary Code Execution

freerdp is vulnerable to arbitrary code execution. The vulnerability exists through an out of bound read/write in usb redirection channel...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through an out of bound read from memory access in cleardecompresssubcoderlex function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in cliprdrserverreceivecapabilities...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in updaterecv...

Authorization Bypass

freerdp is vulnerable to authorization bypass. The vulnerability exists through an integer overflow issue in VIDEO channel...

freerdp: out-of-bounds read in irp functions

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...

freerdp: Out of bound access in clear_decompress_subcode_rlex

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...

freerdp: Out of bound read/write in usb redirection channel

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled nearly arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0...

freerdp: double free in update_read_cache_bitmap_v3_order function

In FreeRDP greater than 1.2 and before 2.0.0, a double free in updatereadcachebitmapv3order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0...

freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read

In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in updatereadsynchronize that could lead to a later out-of-bounds read...

freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c...

freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later

libfreerdp/core/update.c in FreeRDP versions 1.1 through 2.0.0-rc4 has an Out-of-bounds Read...

freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in securityfipsdecrypt in libfreerdp/core/security.c due to an uninitialized value...

freerdp: Out of bound read in update_recv could result in a crash

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...

freerdp: out-of-bounds read could result in aborting the session

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0...