FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate() and results in a memory corruption and probably even a remote code execution.

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress() that results in a memory corruption and probably even a remote code execution.

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment() that results in a memory corruption and probably even a remote code execution.

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress() and results in a memory corruption and probably even a remote code execution.

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode() that results in a memory corruption and possibly even a remote code execution.

Last updated 24 July 2024

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).

Last updated 25 August 2025

Last updated 25 August 2025

Last updated 25 August 2025

A vulnerability was found in FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read in gdi.c.

Upstream Reference:

https://pub.freerdp.com/cve/CVE-2020-11522/

Upstream Commit:

https://github.com/FreeRDP/FreeRDP/commit/907640a924fa7a9a99c80a48ac225e9d8e41548b

A vulnerability was found in FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read in bitmap.c.

Upstream Reference:

https://pub.freerdp.com/cve/CVE-2020-11525/

Upstream Commit:

https://github.com/FreeRDP/FreeRDP/commit/0b6b92a25a77d533b8a92d6acc840a81e103684e

A vulnerability was found in FreeRDP after 1.1 and before 2.0.0, there is a Stream pointer out of bounds in updaterecvsecondaryorder could lead out of bounds read later

Upstream Reference:

https://pub.freerdp.com/cve/CVE-2020-11526/

Upstream Commit:

https://github.com/FreeRDP/FreeRDP/commit/192856cb59974ee4d7d3e72cbeafa676aa7565cf