Количество 13
Количество 13
BDU:2026-10466
Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код
ROS-20260707-73-0019
Уязвимость freerdp3
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
RLSA-2026:38501
Important: freerdp security update
RLSA-2026:37207
Important: freerdp security update
ELSA-2026-38501
ELSA-2026-38501: freerdp security update (IMPORTANT)
ELSA-2026-37207
ELSA-2026-37207: freerdp security update (IMPORTANT)
RLSA-2026:36203
Important: freerdp security update
ELSA-2026-36203
ELSA-2026-36203: freerdp security update (IMPORTANT)
openSUSE-SU-2026:21116-1
Security update for freerdp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-10466 Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | 3 месяца назад |
 | ROS-20260707-73-0019 Уязвимость freerdp3 | CVSS3: 9.8 | 1% Низкий | 24 дня назад |
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 8.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | RLSA-2026:38501 Important: freerdp security update | 1% Низкий | 17 дней назад | |
| RLSA-2026:37207 Important: freerdp security update | 1% Низкий | 21 день назад | |
| ELSA-2026-38501 ELSA-2026-38501: freerdp security update (IMPORTANT) | 18 дней назад | ||
| ELSA-2026-37207 ELSA-2026-37207: freerdp security update (IMPORTANT) | 21 день назад | ||
| RLSA-2026:36203 Important: freerdp security update | 23 дня назад | ||
| ELSA-2026-36203 ELSA-2026-36203: freerdp security update (IMPORTANT) | 15 дней назад | ||
 | openSUSE-SU-2026:21116-1 Security update for freerdp | около 1 месяца назад |
Уязвимостей на страницу