CVE catalog

CVE-2014-0250

freerdp2-devel-2.11.5-1.1 on GA media

Severity: Unknown
Published: Nov 16, 2014, 12:00:00 AM UTC
Updated: Apr 22, 2026, 9:29:46 AM UTC
Source: [NVD] · [CVE record]
EPSS: 3.67% · Oct 25, 2026

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	freerdp	14.04	`1.0.2-1ubuntu1`	vulnerable
Ubuntu	freerdp	14.04	`1.0.2-2ubuntu1`	vulnerable
Ubuntu	freerdp	14.04	`1.0.2-2ubuntu1.1`	fixed
Suse	freerdp	linux enterprise desktop 12 sp1	`1.0.2-9.1`	fixed
Suse	freerdp	linux enterprise software development kit 12 sp1	`1.0.2-9.1`	fixed
Suse	freerdp	linux enterprise workstation extension 12 sp1	`1.0.2-9.1`	fixed
Opensuse	freerdp	tumbleweed	`2.0.0~git.1463131968.4e66df7-2.5`	fixed
Opensuse	freerdp2	tumbleweed	`2.11.5-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	freerdp	deb	14.04	`1.0.2-2ubuntu1.1`	Not reported	UBUNTU-CVE-2014-0250	Not reported
Suse	freerdp	rpm	linux enterprise desktop 12 sp1	`1.0.2-9.1`	Not reported	SUSE-SU-2016:2506-1	Not reported
Suse	freerdp	rpm	linux enterprise software development kit 12 sp1	`1.0.2-9.1`	Not reported	SUSE-SU-2016:2506-1	Not reported
Suse	freerdp	rpm	linux enterprise workstation extension 12 sp1	`1.0.2-9.1`	Not reported	SUSE-SU-2016:2506-1	Not reported
Opensuse	freerdp	rpm	tumbleweed	`2.0.0~git.1463131968.4e66df7-2.5`	Not reported	OPENSUSE-SU-2024:10110-1	Not reported
Opensuse	freerdp2	rpm	tumbleweed	`2.11.5-1.1`	Not reported	OPENSUSE-SU-2024:13816-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[freerdp2-devel]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[freerdp2-proxy]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[freerdp2-server]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[freerdp-devel]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[freerdp-proxy]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[freerdp-proxy-plugins]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[freerdp-sdl]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[freerdp-server]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[freerdp-wayland]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[libfreerdp2-2]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[libfreerdp3-3]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[libfreerdp-server-proxy3-3]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[librdtk0-0]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[libuwac0-0]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[libwinpr2-2]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[libwinpr3-3]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[rdtk0-devel]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[uwac0-devel]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed
[winpr2-devel]Unknown
Source package: [freerdp2]
Details (1)
- 2.11.7-8.4 · x86_64 · tumbleweed
  Unknown · Fixed: 2.11.5-1.1
  Version impact unknown
  pypi · freerdp2 · opensuse · tumbleweed
[winpr-devel]Unknown
Source package: [freerdp]
Details (1)
- 3.31.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.0.0~git.1463131968.4e66df7-2.5
  Version impact unknown
  pypi · freerdp · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:09:55 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]