https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:56:41.888898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11999 bdu:2026-11999 2026-10-02T23:56:41.897665+00:00 bdu:2026-11999 https://cve.radiocsirt.org/vuln/euvd-2026-358419 EUVD-2026-358419 2026-10-02T23:56:41.897700+00:00 EUVD-2026-358419 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55192 fkie_cve-2026-55192 2026-10-02T23:56:41.897715+00:00

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11065-1 openSUSE-SU-2026:11065-1 — freerdp-3.27.1-1.1 on GA media 2026-10-02T23:56:41.897747+00:00

freerdp-3.27.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:68707 RHSA-2026:68707 — Red Hat Security Advisory: freerdp security update 2026-10-02T23:56:41.897768+00:00

FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests FreeRDP: FreeRDP: Denial of Service via malformed media data FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55192 UBUNTU-CVE-2026-55192 2026-10-02T23:56:41.897793+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3, Ubuntu:26.04:LTS: freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1933 WID-SEC-W-2026-1933 — FreeRDP: Mehrere Schwachstellen 2026-10-02T23:56:41.897830+00:00

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen,um nicht näher spezifizierte Auswirkungen zu verursachen, potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.