ALSA-2026:69387 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

Vulnerability of the avc444_ensure_buffer() function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP, allowing a intruder to execute arbitrary code

The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vulnerability of the freerdp_image_copy_from_icon_data() function in the libfreerdp/codec/color.c file of the RDP client FreeRDP, which allows a hacker to disclose protected information or cause service failure.

The vulnerability of the freerdpimagecopyfromicondata function in the libfreerdp/codec/color.c file of the RDP client FreeRDP is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the glyph_cache_get() function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP allows a attacker to disclose sensitive information or cause service failure.

The vulnerability of the glyphcacheget function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...

RHEL 8 : freerdp (RHSA-2026:69387)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69387 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

Vulnerability of the rpc_recvBind_ack_pdu() function in the libfreerdp/core/gateway/rpcBind.c file of the RDP client FreeRDP, allowing a attacker to execute arbitrary code

The vulnerability of the rpcrecvBindackpdu function in the libfreerdp/core/gateway/rpcBind.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

OESA-2026-3944 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109817 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109802 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling

A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...

FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders

A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

FreeRDP: FreeRDP: Denial of Service via malformed media data

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted media data to a connected client. This malformed data can trigger a heap out-of-bounds read vulnerability within the TSMF FFmpeg decoder, leading to the client application crashing. This can...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can provide a specially crafted H.264 video stream that causes the client's H.264 decoder to read beyond its allocated memory. This out-of-bounds read can lead to the disclosure of sensitive client memory or cause the...

FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU

A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol RDP client can send a specially crafted Client Audio Formats Protocol Data Unit PDU to the server. This malformed PDU can cause a double-free vulnerability in the rdpsndserverrecvformats function, leading to the server reliably...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...