CVE-2020-11040

CVE-2020-11040 affects FreeRDP versions up to 2.0.0, where an out-of-bounds data read from memory occurs in clear_decompress_subcode_rlex and is visualized as color on screen. The issue has been fixed in version 2.1.0. Related advisories from Debian, CentOS/RHEL, AlmaLinux, Amazon Linux 2 and CNV...

CVE-2020-11041

CVE-2020-11041 affects FreeRDP up to and including 2.0.0, where an outside controlled array index is used unchecked for sound backend configuration (alsa, oss, pulse, etc.). This can cause a client crash and may lead to a session disconnect or distorted sound. A fix is available in 2.1.0; if upgr...

CVE-2020-11085 Out-of-bounds Read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read by client or server might read data out-of-bounds. This has been fixed in 2.1.0...

CVE-2020-11019

CVE-2020-11019 in FreeRDP

CVE-2020-11043

CVE-2020-11043 affects FreeRDP up to version 2.0.0, describing an out-of-bounds read in rfx_process_message_tileset that causes garbled colors on screen when feeding invalid data to the RFX decoder. The issue has been patched in version 2.1.0. Public advisories and release notes from multiple sou...

CVE-2020-11039

Summary (CVE-2020-11039) In FreeRDP, versions up to and including 2.0.0 with USB redirection enabled can suffer an integer-overflow in length checks that allows (nearly) arbitrary memory read/write when interacting with a manipulated server. This was fixed in version 2.1.0. Public advisories and ...

CVE-2020-11019 Out of bound read in update_recv in FreeRDP

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0...

CVE-2020-11088 Out-of-bound read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadNegotiateMessage. This has been fixed in 2.1.0...

CVE-2020-11038 Integer Overflow to Buffer Overflow in FreeRDP

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the serve...

CVE-2020-11017

CVE-2020-11017 affects FreeRDP (

CVE-2020-11089 Out-of-bound read in FreeRDP

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...

CVE-2020-11088

CVE-2020-11088 is an out-of-bounds read vulnerability in FreeRDP’s NTLM NegotiateMessage handling. Public documents consistently describe this as affecting FreeRDP

CVE-2020-11040 Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...

CVE-2020-11087

CVE-2020-11087 affects FreeRDP (and related Freerdp2 packages in Linux distributions) where an out-of-bounds read occurs in ntlm_read_AuthenticateMessage for versions up to 2.0.0. The issue has been fixed in FreeRDP 2.1.0. Public references in connected advisories/documentation show this CVE list...

CVE-2020-11018

CVE-2020-11018 affects FreeRDP when running versions

CVE-2020-11043 Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

CVE-2020-11038

FreeRDP CVE-2020-11038 affects versions

CVE-2020-11039 Integer Overflow in FreeRDP

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled nearly arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0...

CVE-2020-11087 Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadAuthenticateMessage. This has been fixed in 2.1.0...

CVE-2020-11086 Out-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0...