SUSE CVE-2026-23534

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer. A malicious server can trigger a...

SUSE CVE-2026-23732

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts cbData/remaining length and never validates against the minimum size implied by cx/cy. A malicious server can trigger a client-side global buffer overflow, causing a crash DoS. Versi...

SUSE CVE-2026-23884

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves gdi-drawing pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client-side use after free, causing a crash DoS and...

The vulnerability of the ndr_read_uint8Array() function in the RDP client FreeRDP allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ndrreaduint8Array function in the RDP client FreeRDP is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the audin_process_formats() function in the RDP client of FreeRDP, allowing a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the audinprocessformats function in the RDP client FreeRDP is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the client for USB devices in the URBDRC RDP-client FreeRDP system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the URBDRC RDP-client-freeRDP device lies in unvalidated array indexing. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

MiracleLinux 4 : freerdp-1.0.2-7.AXS4 (AXSA:2020-112:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-112:03 advisory. freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 Tenable has extracted the preceding description block directly fr...

MiracleLinux 7 : freerdp-2.1.1-5.0.1.el7.AXS7 (AXSA:2024-8644:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8644:02 advisory. CVE-2023-39352: add bound check in gdiSolidFill CVE-2023-39353: check indices are within range CVE-2023-39356: fix checks for multi opaque rect...

MiracleLinux 7 : freerdp-2.1.1-5.el7 (AXSA:2021-2542:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2542:02 advisory. freerdp: improper client input validation for gateway connections allows to overwrite memory CVE-2021-41159 freerdp: improper region checks in all...

MiracleLinux 8 : freerdp-2.1.1-1.el8, vinagre-3.22.0-23.el8 (AXSA:2021-1328:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1328:01 advisory. freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 freerdp: Out of bound read/write in usb redirection channel...

MiracleLinux 8 : freerdp-2.2.0-1.el8 (AXSA:2021-2116:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2116:01 advisory. freerdp: out of bounds read in TrioParse CVE-2020-4030 freerdp: out of bound reads resulting in accessing memory location outside of static array...

MiracleLinux 8 : freerdp-2.2.0-10.el8 (AXSA:2023-5972:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5972:03 advisory. freerdp: clients using /parallel command line switch might read uninitialized data CVE-2022-39282 freerdp: clients using the /video command line...

The vulnerability of the SDL3 RDP-client to the FreeRDP client allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the SDL3 RDP client for FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the create_irp_thread() function in the RDP client of FreeRDP, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the createirpthread function in the RDP client of FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

MiracleLinux 7 : freerdp-2.0.0-4.rc4.el7 (AXSA:2020-105:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-105:02 advisory. freerdp: Out-of-bounds write in planar.c CVE-2020-11521 freerdp: Integer overflow in region.c CVE-2020-11523 freerdp: Out-of-bounds write in...

MiracleLinux 9 : freerdp-2.11.2-1.el9 (AXSA:2024-7888:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7888:01 advisory. freerdp: Incorrect offset calculation leading to DOS CVE-2023-39350 freerdp: Null Pointer Dereference leading DOS in RemoteFX CVE-2023-39351 freerdp...

MiracleLinux 9 : freerdp-2.11.7-1.el9 (AXSA:2024-9208:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9208:05 advisory. freerdp: Integer Overflow leading to Heap Overflow in freerdpbitmapplanarcontextreset CVE-2024-22211 freerdp: out-of-bounds read in ncrushdecompress...

MiracleLinux 9 : freerdp-2.4.1-5.el9 (AXSA:2023-5536:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5536:02 advisory. freerdp: clients using /parallel command line switch might read uninitialized data CVE-2022-39282 freerdp: clients using the /video command line...

MiracleLinux 7 : freerdp-2.1.1-2.el7 (AXSA:2020-625:05)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-625:05 advisory. freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 freerdp: Out of bound read/write in usb redirection channel...

MiracleLinux 7 : freerdp-2.1.1-5.0.2.el7.AXS7 (AXSA:2024-8732:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8732:03 advisory. CVE-2021-41159: fix client out of memory CVEs: CVE-2021-41159 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache...