Vulnerability Spotlight: FreeRDP Multiple Vulnerabilities
Summary: Cisco Talos discovered multiple vulnerabilities in FreeRDP, the open-source implementation of Microsoft's Remote Desktop Protocol, falling into two classes: client-side code execution via a specially crafted response from an RDP server, and termination of the FreeRDP client. The flaws stem from unchecked length fields in server-sent packets - in license server handling, the RDP received function, proprietary certificate parsing, security data handling, and license read product info and challenge packet handling - and an attacker can trigger them by compromising the server or using a man-in-the-middle attack.
Bottom line: FreeRDP is integrated into many commercial remote desktop applications, and the tested versions include FreeRDP 2.0.0-beta1+android11 on Windows, OSX and Linux - so a compromised or spoofed RDP server can push arbitrary code to the client side of any product built on this library.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026