FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client

FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch

FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation

FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass

FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing

Heap-buffer-overflow write in planar bitmap decoder

FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions

FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write

FreeRDP has heap-use-after-free in xf_clipboard_format_equal

FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_

FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)

FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)

FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo

Heap-use-after-free in gdi_set_bounds

Heap-use-after-free in update_pointer_new

FreeRDP has heap-buffer-overflow in clear_decompress_bands_data

FreeRDP has heap-buffer-overflow in clear_decompress_residual_data

FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface

FreeRDP has heap-buffer-overflow in clear_decompress

FreeRDP has heap-buffer-overflow in planar_decompress_plane_rle

FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP has a heap-buffer-overflow in drive_process_irp_read

FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array

FreeRDP has a heap-buffer-overflow in audin_process_formats

FreeRDP rdp_redirection_read_base64_wchar out of bound read

freerdp_image_copy out of bound read

FreeRDP ExtractRunLengthRegular* out of bound read

FreeRDP Out-Of-Bounds Read in interleaved_decompress

FreeRDP Out-Of-Bounds Read in ncrush_decompress

FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

FreeRDP OutOfBound Read in zgfx_decompress_segment

FreeRDP vulnerable to integer underflow in nsc_rle_decode

FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

FreeRDP integer Overflow leading to Heap Overflow

Out-Of-Bounds Write in FreeRDP

Out-Of-Bounds Write in FreeRDP

Out-Of-Bounds Write in FreeRDP

Use-After-Free in FreeRDP

IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

Invalid offset validation leading to Out Of Bound Write in FreeRDP

FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request…

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request…

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote…

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption…

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory…

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code…

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code…

FreeRDP before 3.30.0 Heap Overflow via CliprdrStream_Read