FreeRDP versions before 2.11.8-11.oe2403sp1 contain multiple vulnerabilities including heap buffer overflows, out-of-bounds reads, and uninitialized memory disclosures. These flaws arise from improper validation and handling of certain protocol fields and messages, potentially allowing a malicious RDP server or man-in-the-middle to cause client crashes, denial of service, or enable remote code execution when combined with other vulnerabilities. The issues are fixed in version 2.11.8-11.oe2403sp1.