49 matches found
CLSA-2026-1771857838 freerdp: Fix of 6 CVEs
CVE-2026-23948: fix missing NULL check in core/info - CVE-2026-24491: reset channelcallback before close in drdynvc - CVE-2026-24676: reset audin-format in channels/audin - CVE-2026-24680: reset pointer after memory release in Wayland client - CVE-2026-24681: cancel all USB transfers on channel...
CVE-2026-24684
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave. This vulnerability is fixed in 3.22.0...
PT-2026-25337
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A division by zero error exists in the MS-ADPCM and IMA-ADPCM decoders when the nBlockAlign variable is 0, resulting in a crash. The...
PT-2026-25336
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A size t underflow in the IMA-ADPCM and MS-ADPCM audio decoders leads to a heap-buffer-overflow write via the RDPSND audio channel. T...
Exploit for Use After Free in Microsoft
CVE-2019-0708 aka Bluekeep Scanner A simple scanner t...
rdesktop rdpsnd_process_ping() function out-of-bounds read vulnerability
rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the rdpsndprocessping function in rdesktop 1.8.3 and earlier. An attacker could exploit this vulnerability to obtain information...
CVE-2018-8798
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...