Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-109242
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
CVE-2026-109242
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
CVE-2026-109242
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
CVE-2026-109242
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized hea ...
GHSA-wx7m-cfxv-x2x7
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
BDU:2026-16607
Уязвимость функции winpr_aligned_malloc() RDP-клиента FreeRDP, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
RLSA-2026:94510
Important: freerdp security update
RLSA-2026:93592
Important: freerdp security update
ELSA-2026-94510
ELSA-2026-94510: freerdp security update (IMPORTANT)
ELSA-2026-93592
ELSA-2026-93592: freerdp security update (IMPORTANT)
ELSA-2026-94514
ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
ALT-PU-2026-17187
ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process. | CVSS3: 7.1 | 0% Низкий | 28 дней назад |
 | CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process. | CVSS3: 7.1 | 0% Низкий | 28 дней назад |
 | CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process. | CVSS3: 7.1 | 0% Низкий | 28 дней назад |
| CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized hea ... | CVSS3: 7.1 | 0% Низкий | 28 дней назад |
| GHSA-wx7m-cfxv-x2x7 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process. | CVSS3: 7.1 | 0% Низкий | 28 дней назад |
 | BDU:2026-16607 Уязвимость функции winpr_aligned_malloc() RDP-клиента FreeRDP, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании | CVSS3: 7.1 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:94510 Important: freerdp security update | 5 дней назад | ||
| RLSA-2026:93592 Important: freerdp security update | 6 дней назад | ||
| ELSA-2026-94510 ELSA-2026-94510: freerdp security update (IMPORTANT) | 6 дней назад | ||
| ELSA-2026-93592 ELSA-2026-93592: freerdp security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-94514 ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 6 дней назад | ||
| RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад | ||
| ALT-PU-2026-17187 ALT-PU-2026-17187: package `freerdp3` update to version 3.32.1-alt1 | CVSS3: 9.1 | около 1 месяца назад |
Уязвимостей на страницу