Поиск уязвимостей
Количество 17
Количество 17
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.
CVE-2026-45700
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
ROS-20260707-80-0018
Уязвимость freerdp3
RLSA-2026:38501
Important: freerdp security update
RLSA-2026:37207
Important: freerdp security update
ELSA-2026-38501
ELSA-2026-38501: freerdp security update (IMPORTANT)
ELSA-2026-37207
ELSA-2026-37207: freerdp security update (IMPORTANT)
BDU:2026-10466
Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код
ROS-20260707-73-0019
Уязвимость freerdp3
RLSA-2026:36203
Important: freerdp security update
ELSA-2026-36203
ELSA-2026-36203: freerdp security update (IMPORTANT)
openSUSE-SU-2026:21116-1
Security update for freerdp
ALT-PU-2026-8423
ALT-PU-2026-8423: package `freerdp3` update to version 3.26.0-alt1
ALT-PU-2026-8321
ALT-PU-2026-8321: package `freerdp3` update to version 3.26.0-alt1
SUSE-SU-2026:3562-1
Security update for freerdp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 9.8 | 6% Низкий | 5 месяцев назад |
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 8.8 | 6% Низкий | 5 месяцев назад |
 | CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0. | CVSS3: 9.8 | 6% Низкий | 5 месяцев назад |
| CVE-2026-45700 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 9.8 | 6% Низкий | 5 месяцев назад |
 | ROS-20260707-80-0018 Уязвимость freerdp3 | CVSS3: 9.8 | 6% Низкий | 4 месяца назад |
 | RLSA-2026:38501 Important: freerdp security update | 6% Низкий | 4 месяца назад | |
| RLSA-2026:37207 Important: freerdp security update | 6% Низкий | 4 месяца назад | |
| ELSA-2026-38501 ELSA-2026-38501: freerdp security update (IMPORTANT) | 6% Низкий | 4 месяца назад | |
| ELSA-2026-37207 ELSA-2026-37207: freerdp security update (IMPORTANT) | 6% Низкий | 4 месяца назад | |
 | BDU:2026-10466 Уязвимость функции planar_decompress_plane_rle() RDP-клиента FreeRDP, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 6% Низкий | 6 месяцев назад |
| ROS-20260707-73-0019 Уязвимость freerdp3 | CVSS3: 9.8 | 6% Низкий | 4 месяца назад |
| RLSA-2026:36203 Important: freerdp security update | 4 месяца назад | ||
| ELSA-2026-36203 ELSA-2026-36203: freerdp security update (IMPORTANT) | 4 месяца назад | ||
 | openSUSE-SU-2026:21116-1 Security update for freerdp | 5 месяцев назад | ||
| ALT-PU-2026-8423 ALT-PU-2026-8423: package `freerdp3` update to version 3.26.0-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-8321 ALT-PU-2026-8321: package `freerdp3` update to version 3.26.0-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| SUSE-SU-2026:3562-1 Security update for freerdp | 3 месяца назад |
Уязвимостей на страницу