Lucene search
K

14 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007189 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP clients...

9.8CVSS6.1AI score0.0057EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2026/02/23 1:46 a.m.3 views

freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.5AI score0.0057EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/02/23 1:45 a.m.4 views

freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.5AI score0.0057EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/02/23 1:35 a.m.3 views

freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.5AI score0.0057EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2026/02/16 11:45 a.m.1 views

freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.5AI score0.0057EPSS
Exploits1References7
OSV
OSV
added 2026/02/16 11:43 a.m.2 views

SUSE-SU-2026:0559-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audinprocessformats bsc1256718. - CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause heap-buffer-overflow in...

9.8CVSS6.1AI score0.00601EPSS
Exploits8References17
OSV
OSV
added 2026/02/10 3:28 p.m.1 views

SUSE-SU-2026:0421-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audinprocessformats bsc1256718. - CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause heap-buffer-overflow in...

9.8CVSS5.8AI score0.00601EPSS
Exploits8References17
RedHat Linux
RedHat Linux
added 2026/02/05 10:29 a.m.7 views

freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.5AI score0.0057EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2026/01/20 12:25 a.m.3 views

SUSE CVE-2026-23532

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client's gdiSurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a...

7.5CVSS6AI score0.0057EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2026/01/19 6:31 p.m.2 views

CVE-2026-23532

A flaw was found in FreeRDP. A malicious server can exploit a client-side heap buffer overflow vulnerability in the gdiSurfaceToSurface path. This vulnerability, caused by a mismatch in memory handling, can lead to a crash Denial of Service of the client application. Furthermore, it carries a ris...

9.8CVSS6.6AI score0.0057EPSS
Exploits1References6
NVD
NVD
added 2026/01/19 5:15 p.m.2 views

CVE-2026-23532

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s gdiSurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a...

9.8CVSS0.0057EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/01/19 5:15 p.m.1 views

CVE-2026-23532

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s gdiSurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a...

9.8CVSS6.1AI score0.0057EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/01/19 5:3 p.m.14 views

CVE-2026-23532 FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s gdiSurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a...

8.7CVSS0.0057EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/19 5:3 p.m.3 views

EUVD-2026-3316

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s gdiSurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a...

8.7CVSS5.9AI score0.0057EPSS
Exploits1References3
Rows per page
Query Builder