FreeRDP records

228 published records for vendor freerdp.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 9
With a fix record: 98.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

228 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
42Plan	CVE-2018-8787No exploit	FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompressfreerdp · freerdp · CWE-680 pre-auth RCE	Critical9.8	—	8.4%	Nov 29, 2018
41Plan	CVE-2018-8786No exploit	FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_freerdp · freerdp · CWE-680 pre-auth RCE	Critical9.8	—	8.2%	Nov 29, 2018
41Plan	CVE-2018-8788No exploit	FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory cofreerdp · freerdp · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	7.4%	Nov 29, 2018
41Plan	CVE-2018-8784No exploit	FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corrfreerdp · freerdp · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	7.3%	Nov 29, 2018
41Plan	CVE-2018-8785No exploit	FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption afreerdp · freerdp · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	7.3%	Nov 29, 2018
40Plan	CVE-2024-32459Proof of concept	FreeRDP Out-Of-Bounds Read in ncrush_decompressfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	3.7%	Apr 22, 2024
40Plan	CVE-2022-24883No exploit	FreeRDP Server authentication might allow invalid credentials to passfreerdp · freerdp · CWE-287 Pre-auth Auth bypass	Critical9.8	—	2.4%	Apr 26, 2022
40Plan	CVE-2024-32039No exploit	FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_datafreerdp · freerdp · CWE-190 Pre-auth Memory safety	Critical9.8	—	2.3%	Apr 22, 2024
40Plan	CVE-2024-32458No exploit	FreeRDP Out-Of-Bounds Read in planar_skip_plane_rlefreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	1.9%	Apr 22, 2024
40Plan	CVE-2024-32041No exploit	FreeRDP OutOfBound Read in zgfx_decompress_segmentfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	1.9%	Apr 22, 2024
40Plan	CVE-2024-32040No exploit	FreeRDP vulnerable to integer underflow in nsc_rle_decodefreerdp · freerdp · CWE-191 Pre-auth Memory safety	Critical9.8	—	1.9%	Apr 22, 2024
40Plan	CVE-2024-32460No exploit	FreeRDP Out-Of-Bounds Read in interleaved_decompressfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	1.9%	Apr 22, 2024
39Monitor	CVE-2023-39352No exploit	Invalid offset validation leading to Out Of Bound Write in FreeRDPfreerdp · freerdp · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.5%	Aug 31, 2023
39Monitor	CVE-2021-37595No exploit	In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FIfreerdp · freerdp · CWE-20 Pre-auth	Critical9.8	—	1.5%	Jul 30, 2021
39Monitor	CVE-2023-40567No exploit	Out-Of-Bounds Write in FreeRDPfreerdp · freerdp · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.5%	Aug 31, 2023
39Monitor	CVE-2021-37594No exploit	In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FIfreerdp · freerdp · CWE-20 Pre-auth	Critical9.8	—	1.4%	Jul 30, 2021
39Monitor	CVE-2024-32658No exploit	FreeRDP ExtractRunLengthRegular* out of bound readfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	1.4%	Apr 23, 2024
39Monitor	CVE-2023-40186No exploit	IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDPfreerdp · freerdp · CWE-190 Pre-auth Memory safety	Critical9.8	—	1.4%	Aug 31, 2023
39Monitor	CVE-2023-40569No exploit	Out-Of-Bounds Write in FreeRDPfreerdp · freerdp · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.3%	Aug 31, 2023
39Monitor	CVE-2023-39355No exploit	FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICSfreerdp · freerdp · CWE-416 Pre-auth Memory safety	Critical9.8	—	1.3%	Aug 31, 2023
39Monitor	CVE-2023-40574No exploit	Out-Of-Bounds Write in FreeRDPfreerdp · freerdp · CWE-787 Pre-auth Memory safety	Critical9.8	—	1.2%	Aug 31, 2023
39Monitor	CVE-2024-32659No exploit	freerdp_image_copy out of bound readfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	1.2%	Apr 23, 2024
39Monitor	CVE-2023-40187No exploit	Use-After-Free in FreeRDPfreerdp · freerdp · CWE-416 Pre-auth Memory safety	Critical9.8	—	1.2%	Aug 31, 2023
39Monitor	CVE-2024-22211No exploit	FreeRDP integer Overflow leading to Heap Overflowfreerdp · freerdp · CWE-122 Pre-auth Memory safety	Critical9.8	—	1.1%	Jan 19, 2024
39Monitor	CVE-2024-32662No exploit	FreeRDP rdp_redirection_read_base64_wchar out of bound readfreerdp · freerdp · CWE-125 Pre-auth Memory safety	Critical9.8	—	0.8%	Apr 23, 2024

CVE-2018-8787
42Plan
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
freerdp · freerdpNov 29, 2018
CVE-2018-8786
41Plan
FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
freerdp · freerdpNov 29, 2018
CVE-2018-8788
41Plan
FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory co
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
freerdp · freerdpNov 29, 2018
CVE-2018-8784
41Plan
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corr
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
freerdp · freerdpNov 29, 2018
CVE-2018-8785
41Plan
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption a
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
freerdp · freerdpNov 29, 2018
CVE-2024-32459
40Plan
FreeRDP Out-Of-Bounds Read in ncrush_decompress
CriticalCVSS 9.8Proof of conceptEPSS 4%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2022-24883
40Plan
FreeRDP Server authentication might allow invalid credentials to pass
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
freerdp · freerdpApr 26, 2022
CVE-2024-32039
40Plan
FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2024-32458
40Plan
FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2024-32041
40Plan
FreeRDP OutOfBound Read in zgfx_decompress_segment
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2024-32040
40Plan
FreeRDP vulnerable to integer underflow in nsc_rle_decode
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2024-32460
40Plan
FreeRDP Out-Of-Bounds Read in interleaved_decompress
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpApr 22, 2024
CVE-2023-39352
39Monitor
Invalid offset validation leading to Out Of Bound Write in FreeRDP
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2021-37595
39Monitor
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FI
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
freerdp · freerdpJul 30, 2021
CVE-2023-40567
39Monitor
Out-Of-Bounds Write in FreeRDP
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2021-37594
39Monitor
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FI
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
freerdp · freerdpJul 30, 2021
CVE-2024-32658
39Monitor
FreeRDP ExtractRunLengthRegular* out of bound read
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpApr 23, 2024
CVE-2023-40186
39Monitor
IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2023-40569
39Monitor
Out-Of-Bounds Write in FreeRDP
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2023-39355
39Monitor
FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2023-40574
39Monitor
Out-Of-Bounds Write in FreeRDP
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2024-32659
39Monitor
freerdp_image_copy out of bound read
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpApr 23, 2024
CVE-2023-40187
39Monitor
Use-After-Free in FreeRDP
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpAug 31, 2023
CVE-2024-22211
39Monitor
FreeRDP integer Overflow leading to Heap Overflow
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpJan 19, 2024
CVE-2024-32662
39Monitor
FreeRDP rdp_redirection_read_base64_wchar out of bound read
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
freerdp · freerdpApr 23, 2024