Osv Debian - Vulnerabilities List

Osv DebianRecent

60434 matches found

osv_debian•added 2026/10/21 10:47 p.m.•2 views

DEBIAN-CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

5.1CVSS5.8AI score0.00116EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•4 views

DEBIAN-CVE-2026-114041

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

6.9CVSS6.2AI score0.00323EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•5 views

DEBIAN-CVE-2026-114044

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFXMAPSURFACETOWINDOWPDU with oversized...

6.9CVSS6.1AI score0.0025EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•4 views

DEBIAN-CVE-2026-114043

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CFDIB synthesis because winprreadpngfrombuffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winprbitmapwritebuffer copies rows assuming one byte per pixel. A malicious RDP server can...

7.1CVSS6.2AI score0.00278EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•5 views

DEBIAN-CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

7.1CVSS5.8AI score0.00254EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•5 views

DEBIAN-CVE-2026-114045

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsndserverselectformat DVIADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDCFORMATS PDUs with an nBlockAlign too small for...

8.8CVSS6.8AI score0.00484EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•4 views

DEBIAN-CVE-2026-114047

FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed,...

7.6CVSS6AI score0.00159EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 9:47 p.m.•4 views

DEBIAN-CVE-2026-114042

FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash th...

7.1CVSS6.3AI score0.00254EPSS

SaveExploits0References1

osv_debian•added 2026/10/21 7:47 p.m.•3 views

DEBIAN-CVE-2026-111804