https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 05:59:58 +0000 https://db.gcve.eu/vuln/alsa-2026:93592 <p><strong>Affected:</strong> AlmaLinux:9: freerdp, AlmaLinux:9: freerdp-devel, AlmaLinux:9: freerdp-libs, AlmaLinux:9: libwinpr, AlmaLinux:9: libwinpr-devel</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>Security Fix(es):</p> <p>* freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242) * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837) * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: freerdp, AlmaLinux:9: freerdp-devel, AlmaLinux:9: freerdp-libs, AlmaLinux:9: libwinpr, AlmaLinux:9: libwinpr-devel</p> <p>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.</p> <p>Security Fix(es):</p> <p>* freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242) * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837) * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://db.gcve.eu/vuln/alsa-2026:93592 https://db.gcve.eu/vuln/fkie_cve-2026-111880 <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111880 https://db.gcve.eu/vuln/ghsa-98x3-97xw-cfqr <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> https://db.gcve.eu/vuln/ghsa-98x3-97xw-cfqr https://db.gcve.eu/vuln/rhsa-2026:93592 <p>security update for freerdp</p> <p>security update for freerdp</p> https://db.gcve.eu/vuln/rhsa-2026:93592 https://db.gcve.eu/vuln/rhsa-2026:94514 <p>freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted display frames freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder freerdp: freerdp: Denial of Service via zero-width graphics reset freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages</p> <p>freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted display frames freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder freerdp: freerdp: Denial of Service via zero-width graphics reset freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages</p> https://db.gcve.eu/vuln/rhsa-2026:94514 https://db.gcve.eu/vuln/ubuntu-cve-2026-111880 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-111880