FreeRDP versions before 2.11.8-11.oe2403sp3 contain multiple vulnerabilities including heap buffer overflows, out-of-bounds reads, and uninitialized heap memory disclosures. These flaws arise from improper validation and indexing in negotiation request handling, USB redirection channel processing, and RPC gateway transport parsing. Exploitation can lead to client crashes, denial of service, information disclosure, and potentially remote code execution when combined with other vulnerabilities. A fix is available in version 2.11.8-11.oe2403sp3.