Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-91950
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.
CVE-2026-91950
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.
CVE-2026-91950
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.
CVE-2026-91950
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ...
ROS-20261021-80-0024
Уязвимость freerdp
ROS-20261021-80-0023
Уязвимость freerdp3
ROS-20261021-73-0025
Уязвимость freerdp3
GHSA-858j-6g95-r29w
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.
RLSA-2026:75570
Important: freerdp security update
ELSA-2026-75570
ELSA-2026-75570: freerdp security update (IMPORTANT)
ALT-PU-2026-15108
ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-91950 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91950 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91950 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-91950 FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ... | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | ROS-20261021-80-0024 Уязвимость freerdp | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| ROS-20261021-80-0023 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| ROS-20261021-73-0025 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 19 дней назад |
| GHSA-858j-6g95-r29w FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | RLSA-2026:75570 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-75570 ELSA-2026-75570: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-15108 ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1 | CVSS3: 9.3 | около 2 месяцев назад |
Уязвимостей на страницу