Поиск уязвимостей
Количество 10
Количество 10
CVE-2026-109677
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits.
CVE-2026-109677
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits.
CVE-2026-109677
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits.
CVE-2026-109677
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read ...
GHSA-fwx5-6r67-r722
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits.
BDU:2026-16875
Уязвимость функции smartcard_LocateCardsByATRA_Call() RDP-клиента FreeRDP, позволяющая нарушителю обойти механизм защиты ASLR
ROS-20261106-80-0026
Уязвимость freerdp3
ROS-20261106-73-0027
Уязвимость freerdp3
ALT-PU-2026-13711
ALT-PU-2026-13711: package `freerdp3` update to version 3.30.0-alt2
ALT-PU-2026-11763
ALT-PU-2026-11763: package `freerdp3` update to version 3.30.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-109677 FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-109677 FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-109677 FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
| CVE-2026-109677 FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read ... | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
| GHSA-fwx5-6r67-r722 FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits. | CVSS3: 6.5 | 0% Низкий | 28 дней назад |
 | BDU:2026-16875 Уязвимость функции smartcard_LocateCardsByATRA_Call() RDP-клиента FreeRDP, позволяющая нарушителю обойти механизм защиты ASLR | CVSS3: 9.1 | 0% Низкий | 28 дней назад |
 | ROS-20261106-80-0026 Уязвимость freerdp3 | CVSS3: 9.1 | 0% Низкий | 4 дня назад |
| ROS-20261106-73-0027 Уязвимость freerdp3 | CVSS3: 9.1 | 0% Низкий | 4 дня назад |
| ALT-PU-2026-13711 ALT-PU-2026-13711: package `freerdp3` update to version 3.30.0-alt2 | CVSS3: 9.8 | 3 месяца назад | |
| ALT-PU-2026-11763 ALT-PU-2026-11763: package `freerdp3` update to version 3.30.0-alt1 | CVSS3: 9.8 | 3 месяца назад |
Уязвимостей на страницу