| Bug | trixie | forky | sid | Description |
|---|
| TEMP-0000000-FBC245 | vulnerable | fixed | fixed | GHSA-2vf2-grvj-6g8x: Heap buffer overflow in nego_send_negotiation_request |
| TEMP-0000000-F89685 | vulnerable | fixed | fixed | GHSA-r9pv-ffph-6gg6: Heap buffer overflow in nego_send_negotiation_request via oversized LB_LOAD_BALANCE_INFO routing token |
| TEMP-0000000-F43378 | vulnerable | fixed | fixed | GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close |
| TEMP-0000000-DF359B | vulnerable | fixed | fixed | GHSA-hg4r-vv53-vwf8: URBDRC out-of-bounds read in func_get_ep_desc via InterfaceNumber/array-position index mismatch |
| TEMP-0000000-C525DA | vulnerable | fixed | fixed | GHSA-x7v6-xfx3-52j6: FreeRDP server continues after negotiation failure and dispatches a failure code as RDSTLS |
| TEMP-0000000-C0C4D6 | vulnerable | fixed | fixed | GHSA-w9qg-g24r-77f6: URBDRC/libusb control-transfer path aborts on reachable OutputBufferSize assertion |
| TEMP-0000000-812972 | vulnerable | fixed | fixed | GHSA-4464-r7qj-pgrx: FreeRDP: server stores client Core Data DesktopWidth/Height unvalidated in GCC negotiation |
| TEMP-0000000-740209 | vulnerable | fixed | fixed | GHSA-pj8w-fh79-f438: rts_read_result length-checks 2 bytes and then reads 4 |
| TEMP-0000000-027680 | vulnerable | fixed | fixed | GHSA-ffjr-p229-hpch: NULL pointer dereference in gdi_surface_bits when the client has not enabled NSCodec |
| TEMP-0000000-02046B | vulnerable | fixed | fixed | GHSA-v649-94v2-p72q: Uninitialised heap disclosure in FreeRDP Save Session Info PDU |
| TEMP-0000000-205CFB | vulnerable | fixed | fixed | GHSA-r7jx-j9h7-j4xj: FreeRDP RDPGFX ResetGraphics discloses up to 300 bytes of uninitialized heap memory |
| TEMP-0000000-42E2A2 | vulnerable | fixed | fixed | GHSA-f5p6-88mh-59vg: audin Apple backends perform overflow-prone buffer size arithmetic from server-controlled values |
| TEMP-0000000-9C2340 | vulnerable | fixed | fixed | GHSA-j5mq-3349-gwmm: channels,smartcard worker creation failure frees a devman-owned device |
| TEMP-0000000-8FA4DB | vulnerable | fixed | fixed | GHSA-m85m-3qxv-63h5: Infinite loop / CPU DoS in pool_decode_rect |
| TEMP-0000000-8E2D4B | vulnerable | fixed | fixed | GHSA-23pf-q83q-x45r: Unbounded MonitorIds used as an array index in X11 monitor selection |
| TEMP-0000000-3E88C4 | vulnerable | fixed | fixed | GHSA-h5w2-q35j-443h: Out-of-bounds write in urb_send_current_frame_number_result |
| TEMP-0000000-1DE636 | vulnerable | fixed | fixed | GHSA-57h7-vw2f-2f9x: Client-side heap OOB read in FreeRDP AVC444 chroma combine |
| TEMP-0000000-01B8B3 | vulnerable | fixed | fixed | GHSA-c5gr-hmqp-pwj4: RDPDR out-of-bounds read in rdpdr_dump_packet via UINT32 wraparound in 16 + computerNameLen guard |
| TEMP-0000000-0DF650 | vulnerable | fixed | fixed | GHSA-hw7p-5h2r-83gq: Disclosure of uninitialized heap memory in the urbdrc USB redirection path |
| CVE-2026-85090 | vulnerable | fixed | fixed | FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability ... |
| CVE-2026-85089 | vulnerable | fixed | fixed | FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uniniti ... |
| CVE-2026-73242 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-73241 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-68580 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the ... |
| CVE-2026-68579 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflo ... |
| CVE-2026-67306 | vulnerable (no DSA) | fixed | fixed | FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vuln ... |
| CVE-2026-67304 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ... |
| CVE-2026-67303 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(Out ... |
| CVE-2026-67302 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide- ... |
| CVE-2026-67301 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in t ... |
| CVE-2026-67300 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnera ... |
| CVE-2026-67299 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a client-side heap use-after-free in th ... |
| CVE-2026-67298 | vulnerable (no DSA) | fixed | fixed | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in ... |
| CVE-2026-67297 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when pr ... |
| CVE-2026-67296 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a denial of service vulnerability in th ... |
| CVE-2026-67295 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR ... |
| CVE-2026-67294 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU ... |
| CVE-2026-67293 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improp ... |
| CVE-2026-67292 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability ... |
| CVE-2026-67291 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap ou ... |
| CVE-2026-67290 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability ... |
| CVE-2026-67289 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate ... |
| CVE-2026-67288 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ... |
| CVE-2026-66402 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple ... |
| CVE-2026-66401 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerabilit ... |
| CVE-2026-64621 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double- ... |
| CVE-2026-64620 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer ... |
| CVE-2026-63652 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-63633 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-63117 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-57158 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. From ... |
| CVE-2026-57157 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-57156 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-56297 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcma ... |
| CVE-2026-55827 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55648 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55564 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55194 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55193 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55192 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-55191 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-45700 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-44422 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-44421 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-44420 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-40033 | vulnerable (no DSA) | fixed | fixed | FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in ... |
| CVE-2026-27951 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-27950 | vulnerable (no DSA) | fixed | fixed | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| Bug | Description |
|---|
| TEMP-0000000-04317D | GHSA-vccg-35r5-8jrf: Stream_EnsureCapacity still overflows |
| TEMP-0000000-2BCF00 | GHSA-9jcm-x588-gh26: SHOW_PROTOCOL live-pointer overwrite |
| TEMP-0000000-1DDFF5 | GHSA-q65v-4w7q-hx3r: Smartcard response lengths are not bounded to their inline ATR arrays |
| CVE-2026-67305 | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow v ... |
| CVE-2026-40254 | FreeRDP is a free implementation of the Remote Desktop Protocol. Versi ... |
| CVE-2026-33995 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33987 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33986 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33985 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33984 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33983 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33982 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33977 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-33952 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-31897 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-31885 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-31884 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-31883 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-31806 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-29776 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-29775 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-29774 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-27015 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-26986 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-26965 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-26955 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-26271 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25997 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25959 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25955 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25954 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25953 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25952 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25942 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-25941 | FreeRDP is a free implementation of the Remote Desktop Protocol. Versi ... |
| CVE-2026-24684 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24683 | FreeRDP is a free implementation of the Remote Desktop Protocol. ainpu ... |
| CVE-2026-24682 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24681 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24680 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24679 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24678 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24677 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24676 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24675 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-24491 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23948 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23884 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23883 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23732 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23534 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23533 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23532 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23531 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-23530 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22859 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22858 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22857 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22856 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22855 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22854 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22853 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22852 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2026-22851 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2025-68118 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2025-4478 | A flaw was found in the FreeRDP used by Anaconda's remote install feat ... |
| CVE-2024-32662 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32661 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32660 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... |
| CVE-2024-32659 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32658 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32460 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32459 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32458 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32041 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32040 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |
| CVE-2024-32039 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeR ... |