FreeRDP security vulnerabilities

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.21.0 contained security vulnerabilities. These vulnerabilities stemmed from specially crafted residual data in the RDP GFX ClearCodec decoding path, which could lead to out-of-bound...

FreeRDP resource management error vulnerability

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.21.0 contained a resource management vulnerability. This vulnerability occurred when, after deleting the screen extents bitmap, the gdi-drawing mechanism still pointed to freed...

FreeRDP security vulnerabilities

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.21.0 contained security vulnerabilities. These vulnerabilities stemmed from the FastGlyph parsing mechanism, which trusted the cbData field without verifying the minimum size based ...

Linux Distros Unpatched Vulnerability : CVE-2026-23883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, xfPointerNew frees cursorPixels on failure, then pointerfree calls...

FreeRDP resource management error vulnerability

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.21.0 contained a resource management vulnerability. This vulnerability stemmed from the xfPointerNew function releasing cursorPixels when it failed. Subsequently, the pointerfree...

freerdp-3.20.2-1.1 on GA media (moderate)

freerdp-3.20.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10059-1 Rating: moderate Cross-References: CVE-2026-22851 CVE-2026-22852 CVE-2026-22853 CVE-2026-22854 CVE-2026-22855 CVE-2026-22856 CVE-2026-22857 CVE-2026-22858 CVE-2026-22859 CVSS scores: CVE-2026-22851 SUSE : 5.9...

OPENSUSE-SU-2026:10059-1 freerdp-3.20.2-1.1 on GA media

These are all security issues fixed in the freerdp-3.20.2-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 43 Update: freerdp-3.20.2-1.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

SUSE CVE-2026-22851

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...

SUSE CVE-2026-22852

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS...

SUSE CVE-2026-22854

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

SUSE CVE-2026-22855

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1...

SUSE CVE-2026-22856

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use-after-free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

SUSE CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

SUSE CVE-2026-22859

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server-supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out-of-bounds read. This vulnerability is...

Fedora 43 : freerdp (2026-79f923d917)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-79f923d917 advisory. Update to 3.20.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

MiracleLinux 7 : freerdp-1.0.2-15.el7.1 (AXSA:2019-3794:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3794:01 advisory. Security Fix - FreeRDP updatereadbitmapupdate CVE-2018-8786 - FreeRDP gdiBitmapDecompress CVE-2018-8787 - FreeRDP nscrledecode4 CVE-2018-8788...

MiracleLinux 7 : freerdp-2.0.0-1.rc4.el7, vinagre-3.22.0-12.el7 (AXSA:2019-4179:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4179:01 advisory. freerdp: out of bounds read in drdynvcprocesscapabilityrequest CVE-2018-1000852 Tenable has extracted the preceding description block directly from the...

CLSA-2026-1768385951 freerdp: Fix of CVE-2024-32460

CVE-2024-32460: fix regression due to bug in alignedrecalloc...

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...