FreeRDP versions before 2.11.8-11.oe2403sp4 contain multiple security vulnerabilities including heap buffer overflows, out-of-bounds reads, and uninitialized heap memory disclosures. These flaws arise from improper validation and handling of RDP protocol messages such as Server Redirection PDUs, URBDRC channel messages, and RPC gateway transport parser data. Exploitation can lead to client crashes, denial of service, information disclosure, and potentially remote code execution when combined with other vulnerabilities. The issues are fixed in version 2.11.8-11.oe2403sp4.