Vulnerabilities in FreeRDP
322 resultsCVE-2026-55192HIGHFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatchEPSS 0.4%CVE-2026-33983MEDIUMFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoSEPSS 0.4%CVE-2026-55648MEDIUMFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds CheckEPSS 0.4%CVE-2026-121956HIGHFreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgtEPSS 0.4%CVE-2026-44422HIGHFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusionEPSS 0.4%CVE-2026-22852MEDIUMFreeRDP has a heap-buffer-overflow in audin_process_formatsEPSS 0.4%CVE-2026-67289CRITICALFreeRDP before 3.29.0 HTTP Proxy Request Injection via RedirectionEPSS 0.4%CVE-2026-67288HIGHFreeRDP before 3.29.0 Denial of Service via smartcard cacheEPSS 0.4%CVE-2026-121951HIGHFreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input EventEPSS 0.4%CVE-2026-67303MEDIUMFreeRDP before 3.29.0 Denial of Service via serial DeviceControlEPSS 0.4%CVE-2026-109949HIGHFreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual SmartcardEPSS 0.4%CVE-2026-67291HIGHFreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADDEPSS 0.4%CVE-2026-33984HIGHFreeRDP: ClearCodec resize_vbar_entry() Heap OOB WriteEPSS 0.4%CVE-2026-27951MEDIUMFreeRDP has possible Integer overflow in Stream_EnsureCapacityEPSS 0.4%CVE-2026-114043HIGHVulnerability in FreeRDPEPSS 0.4%CVE-2026-109246HIGHFreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDUEPSS 0.4%CVE-2026-91950HIGHFreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 WraparoundEPSS 0.4%CVE-2026-73242HIGHFreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`EPSS 0.4%CVE-2026-67299HIGHFreeRDP before 3.29.0 Use-After-Free via WindowIcon async messageEPSS 0.4%CVE-2026-109257HIGHFreeRDP before 3.32.0 Double Free via NSCodec plane growth failureEPSS 0.4%