Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client.
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client.
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client.
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP ...
GHSA-q3cv-4fpg-3hq2
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client.
RLSA-2026:94510
Important: freerdp security update
RLSA-2026:93592
Important: freerdp security update
ELSA-2026-94510
ELSA-2026-94510: freerdp security update (IMPORTANT)
ELSA-2026-93592
ELSA-2026-93592: freerdp security update (IMPORTANT)
ELSA-2026-94514
ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
ALT-PU-2026-17187
ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client. | CVSS3: 7.1 | 0% Низкий | 25 дней назад |
 | CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client. | CVSS3: 7.1 | 0% Низкий | 25 дней назад |
 | CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client. | CVSS3: 7.1 | 0% Низкий | 25 дней назад |
| CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP ... | CVSS3: 7.1 | 0% Низкий | 25 дней назад |
| GHSA-q3cv-4fpg-3hq2 FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded samples cross the heap allocation, crashing the client. | CVSS3: 7.1 | 0% Низкий | 25 дней назад |
 | RLSA-2026:94510 Important: freerdp security update | 5 дней назад | ||
| RLSA-2026:93592 Important: freerdp security update | 6 дней назад | ||
| ELSA-2026-94510 ELSA-2026-94510: freerdp security update (IMPORTANT) | 6 дней назад | ||
| ELSA-2026-93592 ELSA-2026-93592: freerdp security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-94514 ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 6 дней назад | ||
| RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад | ||
| ALT-PU-2026-17187 ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1 | CVSS3: 9.1 | около 1 месяца назад |
Уязвимостей на страницу