https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:59:36.865308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10984 bdu:2026-10984 2026-10-03T09:59:36.963729+00:00 bdu:2026-10984 https://cve.radiocsirt.org/vuln/euvd-2026-343725 EUVD-2026-343725 2026-10-03T09:59:36.963767+00:00 EUVD-2026-343725 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67290 fkie_cve-2026-67290 2026-10-03T09:59:36.963782+00:00

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

 https://cve.radiocsirt.org/vuln/ghsa-v8g5-qxq2-3959 GHSA-v8g5-qxq2-3959 2026-10-03T09:59:36.963812+00:00

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

 https://cve.radiocsirt.org/vuln/rhsa-2026:68706 RHSA-2026:68706 — Red Hat Security Advisory: freerdp security update 2026-10-03T09:59:36.963829+00:00

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests FreeRDP: FreeRDP: Denial of Service via malformed media data FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-67290 UBUNTU-CVE-2026-67290 2026-10-03T09:59:36.963877+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2384 WID-SEC-W-2026-2384 — FreeRDP: Mehrere Schwachstellen 2026-10-03T09:59:36.963911+00:00

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.