freerdp

Multiple heap buffer overflow and use-after-free vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities can lead to denial of service and potential code execution when connecting to malicious RDP servers. The issues affect the xfreerdp client and involve crafted RDPGFX surface updates and client-side heap buffer overflows. Red Hat has released security updates addressing these vulnerabilities in Red Hat Enterprise Linux 8.8 variants.

Red Hat Security Advisory: freerdp security update

Multiple heap buffer overflow and use-after-free vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities can lead to denial of service and potential code execution when connecting to malicious RDP servers. The issues affect Red Hat Enterprise Linux 8.6 variants and related distributions. Red Hat has issued security updates addressing these vulnerabilities.

Multiple heap buffer overflow and use-after-free vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). These vulnerabilities can lead to denial of service and potential code execution when connecting to malicious RDP servers. The issues affect the xfreerdp client and involve crafted RDPGFX surface updates and client-side heap buffer overflows. Red Hat has issued an important security advisory addressing these vulnerabilities in Red Hat Enterprise Linux 8.2 AUS. Updates are available to remediate these issues.

Multiple heap buffer overflow and use-after-free vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities can lead to denial of service and potential code execution when connecting to malicious RDP servers. The issues affect FreeRDP versions included in Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Update Support. Red Hat has released security updates addressing these vulnerabilities.

Multiple heap buffer overflow and use-after-free vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol client. These vulnerabilities can lead to denial of service and potential arbitrary code execution when connecting to malicious RDP servers. The issues affect client-side components and involve crafted RDPGFX surface updates and other client interactions. Red Hat has issued security updates addressing these vulnerabilities in FreeRDP packages for Red Hat Enterprise Linux 9.6 Extended Update Support and related products.

security update for freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)

* freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)

* freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

* freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)

* freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)

* freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)

* freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple vulnerabilities in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), have been identified that could lead to denial of service and potential arbitrary code execution when connecting to malicious RDP servers. These include heap buffer overflows and use-after-free issues affecting the xfreerdp client. The vulnerabilities affect Red Hat Enterprise Linux 9.2 and related packages. Red Hat has issued a security advisory with updates to address these issues.

Multiple vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP) client. These include heap buffer overflows and use-after-free flaws that can lead to denial of service and potential arbitrary code execution when connecting to a malicious RDP server. The issues affect the xfreerdp client used in Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat has issued security updates addressing these vulnerabilities.

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)

* freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)

* freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)

* freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)

* freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Search: CVE-2026-23530