Approved changes feed: RSS · Atom

cpe:2.3:a:freerdp:freerdp:3.0.0:beta2:*:*:*:*:*:*

part: a version: 3.0.0 update: beta2

VendorFreerdp (cfeb94e5-95a8-5e78-a94b-4a8e156315c8)
ProductFreerdp (5f69cb6c-ded4-5a57-acbc-ebffc4e24284)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/freerdp2-dev purl2cpe 2026-06-01 10:14:39.066657
pkg:deb/ubuntu/freerdp2-dev purl2cpe 2026-06-01 10:14:39.066659
pkg:github/freerdp/freerdp purl2cpe 2026-06-01 10:14:39.066660
pkg:gitlab/kalilinux/freerdp purl2cpe 2026-06-01 10:14:39.066662
pkg:nugget/FreeRDP purl2cpe 2026-06-01 10:14:39.066663
pkg:rpm/fedora/freerdp purl2cpe 2026-06-01 10:14:39.066664
pkg:rpm/opensuse/freerdp purl2cpe 2026-06-01 10:14:39.066666
pkg:sourceforge/freerdp purl2cpe 2026-06-01 10:14:39.066667

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40589 vulnerable 2026-06-08 06:11:03.910567 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40576 vulnerable 2026-06-08 06:11:03.665434 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40575 vulnerable 2026-06-08 06:11:03.665045 Out-Of-Bounds Read in FreeRDP
MEDIUM (5.3)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_YUV444ToRGB_8u_P3AC4R_BGRX` function. This issue is likely down to insufficient data for the `pSrc` variable and results in crashes. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
Published: 2023-08-31T21:34:11.729Z
Updated: 2025-02-13T17:08:33.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40574 vulnerable 2026-06-08 06:11:03.664414 Out-Of-Bounds Write in FreeRDP
MEDIUM (6.5)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely down to incorrect calculations of the `nHeight` and `srcStep` variables. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.
Published: 2023-08-31T21:39:17.151Z
Updated: 2025-02-13T17:08:32.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40569 vulnerable 2026-06-08 06:11:03.643010 Out-Of-Bounds Write in FreeRDP
MEDIUM (6.5)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of the `nXSrc` and `nYSrc` variables. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.
Published: 2023-08-31T21:41:12.898Z
Updated: 2025-11-03T20:35:55.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40567 vulnerable 2026-06-08 06:11:03.636820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40188 vulnerable 2026-06-08 06:09:41.385561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40187 vulnerable 2026-06-08 06:09:41.384938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40186 vulnerable 2026-06-08 06:09:41.384262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40181 vulnerable 2026-06-08 06:09:41.377276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39356 vulnerable 2026-06-08 06:09:37.193869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39355 vulnerable 2026-06-08 06:09:37.193058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39354 vulnerable 2026-06-08 06:09:37.190374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39353 vulnerable 2026-06-08 06:09:37.189667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39352 vulnerable 2026-06-08 06:09:37.188904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39351 vulnerable 2026-06-08 06:09:37.187879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39350 vulnerable 2026-06-08 06:09:37.186188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.