Most severe vulnerabilities for "freerdp freerdp" 2.0.0

Where

AND

Sort:

FreeRDP freerdpFreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read

Risk 42

Severity

8.1

EPSS

0.04%

Input Validation

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRETOSURFACE2 PDU with a bitmapDataLength value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.

First published (updated )

CVE-2026-25941

FreeRDP freerdpInteger Overflow

Risk 63

Severity

6.6

Integer Overflow

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11521

FreeRDP freerdpInteger Overflow

Risk 63

Severity

6.6

Integer Overflow

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11523

FreeRDP freerdpLast updated 25 August 2025

Risk 63

Severity

6.6

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11524

FreeRDP freerdpLast updated 25 August 2025

Risk 41

Severity

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11522

FreeRDP freerdpImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP

Risk 19

Severity

3.5

Buffer Overflow

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdpreadfontcapabilityset could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0.

1 / 2

Source: Launchpad

First published (updated )

CVE-2020-11058

FreeRDP freerdpLast updated 25 August 2025

Risk 19

Severity

3.5

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11525

FreeRDP freerdpInteger Overflow

Risk 19

Severity

3.5

Integer Overflow

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2020-11526

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact