CLSA-2026-1792767913 freerdp: Fix of CVE-2026-55193

CVE-2026-55193: fix heap buffer overflow in the TS Gateway RPC client; ensure remaining capacity in rpcchannelread and reject bindack fragment sizes above 0x0FF8...

CLSA-2026-1792768177 freerdp: Fix of CVE-2026-55193

CVE-2026-55193: fix heap buffer overflow in the TS Gateway RPC client; ensure remaining capacity in rpcchannelread and reject bindack fragment sizes above 0x0FF8...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.27.0, FreeRDP clients that used the TS Gateway accepted a server-controlled maxxmitfrag value in libfreerdp/core/gateway/rpc Bind.c without restricting it to an allocation of 4088 bytes for the ReceiveFragment...

CVE-2026-55194 FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

UBUNTU-CVE-2026-55194

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

rpc.py code issue vulnerabilities

rpc.py is a fast and powerful ASGI/WSGI-based RPC framework for individual developers in Aber, China. A security vulnerability exists in rpc.py version 0.6.0 and earlier. An attacker exploited the vulnerability to process data using unpickle...

Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1

2.1.2-alt1 built June 25, 2020 Andrey Cherepanov in task 253866 June 23, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-4033 Out of bound read in RLEDECOMPRESS + CVE-2020-4031 Use-After-Free in gdiSelectObject + CVE-2020-4032 Integer casting vulnerability in updaterecvsecondaryorder +...