Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

FreeRDP/FreeRDP

              master @ 74dd232
            

506

Fixes

CVEs

CRITICAL

Peak severity

34.3%

Coverage

Highlights

Memory Corruption: 111 prior fixes. Scrutinize any change in this area.

libfreerdp/codec/clear.c: most-fixed (27 issues). Treat as high-risk during review.

376 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Out-of-bounds Write: Typo-based coordinate validations and off-by-one errors in planar bitmap decompression allow remote heap corruption via crafted RLE planar streams. Planar is a critical, frequently targeted codec in GDI rendering paths.

Heap-based Buffer Overflow: The Clear codec has repeatedly failed to validate input dimensions (width, height, and step values) before allocating memory and calling CopyMemory, allowing remote code execution via malformed glyphs or band data.

Use After Free: Asynchronous clipboard operations suffer from state-synchronization races where formatting buffers are concurrently accessed by event loops and auto-reconnection threads after being freed, enabling heap corruption.