CVE Feed

    Dashboard / CVE / CVE-2014-0250

    CVE-2014-0250

    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

    Published:May 28, 2014
    Last Modified:Apr 12, 2025
    EPS:Nov 16, 2014
    EPSS Score:0.03073
    CVSS Score:7.5

    Affected Products

    Vendor
    Freerdp
    Product
    Freerdp
    Vendor
    Opensuse
    Product
    Opensuse

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-85089 (CVSS 7.1) — FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info …
    CVE-2026-85090 (CVSS 5.3) — FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 functio…
    CVE-2026-69159 (CVSS 5.4) — ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplica…
    CVE-2026-63633 (CVSS 7.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode_opus in l…
    CVE-2026-63652 (CVSS 7.1) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats i…
    CVE-2026-63117 (CVSS 6.5) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client …
    CVE-2026-55192 (CVSS 7.2) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backen…
    CVE-2026-55194 (CVSS 8.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in …
    CVE-2026-55648 (CVSS 6.1) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_image_copy_from_icon…
    CVE-2026-55193 (CVSS 8.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gat…

    References

    http://advisories.mageia.org/MGASA-2014-0287.html
    http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html
    http://seclists.org/oss-sec/2014/q2/365
    http://security.gentoo.org/glsa/glsa-201412-18.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:171
    http://www.securityfocus.com/bid/67670
    https://bugzilla.redhat.com/show_bug.cgi?id=998934
    https://github.com/FreeRDP/FreeRDP/issues/1871
    https://github.com/FreeRDP/FreeRDP/pull/1874
    http://advisories.mageia.org/MGASA-2014-0287.html
    http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html
    http://seclists.org/oss-sec/2014/q2/365
    http://security.gentoo.org/glsa/glsa-201412-18.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:171
    http://www.securityfocus.com/bid/67670
    https://bugzilla.redhat.com/show_bug.cgi?id=998934
    https://github.com/FreeRDP/FreeRDP/issues/1871
    https://github.com/FreeRDP/FreeRDP/pull/1874

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High