https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:05:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11999 bdu:2026-11999 https://cve.radiocsirt.org/vuln/bdu:2026-11999 https://cve.radiocsirt.org/vuln/euvd-2026-358419 EUVD-2026-358419 https://cve.radiocsirt.org/vuln/euvd-2026-358419 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55192 <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55192 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11065-1 <p>freerdp-3.27.1-1.1 on GA media</p> <p>freerdp-3.27.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11065-1 https://cve.radiocsirt.org/vuln/rhsa-2026:68707 <p>FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests FreeRDP: FreeRDP: Denial of Service via malformed media data FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders</p> <p>FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests FreeRDP: FreeRDP: Denial of Service via malformed media data FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders</p> https://cve.radiocsirt.org/vuln/rhsa-2026:68707 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55192 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:25.10: freerdp3, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP server can provide an AVC420 or AVC444 bitstream whose decoded frame is smaller than the negotiated surface, causing yuv420_context_decode and the YUV-to-RGB conversion paths to read beyond the decoder-owned planes in libfreerdp/codec/h264.c and the selected H.264 backend. This can disclose client memory or crash the client. This issue is fixed in version 3.27.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55192 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1933 <p>Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen,um nicht näher spezifizierte Auswirkungen zu verursachen, potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen,um nicht näher spezifizierte Auswirkungen zu verursachen, potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1933