BugRater
Early access. This site has moved to bugrater.com.

Security releases

FreeRDP

FreeRDP Security Releases - October 2026

freerdp-2026-10 Oct 1, 2026 Source: Vendor

FreeRDP security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-109240
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

171 lines
All 171 CVEs 171 Additional recognition 0 Unclaimed only
Showing 151–171 of 171 matching , page 4 of 4 , clear filters
CVE-2026-111376 BR2026-0000-033173 FreeRDP unclaimed
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid memory reads via sh...
Credited as opensec-intelligence
CVE-2026-111377 BR2026-0000-033174 FreeRDP unclaimed
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static v...
Credited as Kushalkhemka
CVE-2026-111377 BR2026-0000-033175 FreeRDP unclaimed
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static v...
Credited as mayank-jangid-moon
CVE-2026-111377 BR2026-0000-033176 FreeRDP unclaimed
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static v...
Credited as skigeek16
CVE-2026-111377 BR2026-0000-033177 FreeRDP unclaimed
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static v...
Credited as opensec-intelligence
CVE-2026-111378 BR2026-0000-033178 FreeRDP unclaimed
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can comp...
Credited as Kushalkhemka
CVE-2026-111378 BR2026-0000-033179 FreeRDP unclaimed
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can comp...
Credited as opensec-intelligence
CVE-2026-111378 BR2026-0000-033180 FreeRDP unclaimed
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can comp...
Credited as mayank-jangid-moon
CVE-2026-111378 BR2026-0000-033181 FreeRDP unclaimed
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can comp...
Credited as skigeek16
CVE-2026-111379 BR2026-0000-033182 FreeRDP unclaimed
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. ...
Credited as programmervuln
CVE-2026-111380 BR2026-0000-033183 FreeRDP unclaimed
FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels i...
Credited as thawkhant
CVE-2026-111381 BR2026-0000-033184 FreeRDP unclaimed
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calcul...
Credited as programmervuln
CVE-2026-111382 BR2026-0000-033185 FreeRDP unclaimed
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. ...
Credited as manus-use
CVE-2026-111880 BR2026-0000-037149 FreeRDP unclaimed
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafte...
Credited as Kushalkhemka
CVE-2026-111880 BR2026-0000-037150 FreeRDP unclaimed
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafte...
Credited as mayank-jangid-moon
CVE-2026-111880 BR2026-0000-037151 FreeRDP unclaimed
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafte...
Credited as skigeek16
CVE-2026-111880 BR2026-0000-037152 FreeRDP unclaimed
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafte...
Credited as opensec-intelligence
CVE-2026-111881 BR2026-0000-037153 FreeRDP unclaimed
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RD...
Credited as Kushalkhemka
CVE-2026-111881 BR2026-0000-037154 FreeRDP unclaimed
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RD...
Credited as opensec-intelligence
CVE-2026-111881 BR2026-0000-037155 FreeRDP unclaimed
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RD...
Credited as mayank-jangid-moon
CVE-2026-111881 BR2026-0000-037156 FreeRDP unclaimed
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RD...
Credited as skigeek16