PT-2026-137002

FreeRDP before 3.32.2 does not check the product of surface dimensions in gdi CreateSurface when handling an RDPGFX CREATE SURFACE PDU, causing an integer wrap and heap buffer overflow on 32-bit builds and an approximately 4 GiB allocation on 64-bit builds. A malicious RDP server can send a CREAT...

FreeRDP gdi_CreateSurface Code Execution

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service failure by sending specially crafted RDPGFX packets...

freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface

An integer overflow vulnerability was found in the gdiCreateSurface function in FreeRDP, which may result in a crash...

FreeRDP RDP DoS

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

DEBIAN-CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...