Red Hat Security Advisory

RHSA-2026:10951

freerdp security update

Released 2026-04-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) freerdp-2:2.2.0-7.el8_6.5, freerdp-libs-2:2.2.0-7.el8_6.5, libwinpr-2:2.2.0-7.el8_6.5 +1
Red Hat Enterprise Linux AppStream E4S (v.8.6) freerdp-2:2.2.0-7.el8_6.5, freerdp-libs-2:2.2.0-7.el8_6.5, libwinpr-2:2.2.0-7.el8_6.5 +1
Red Hat Enterprise Linux AppStream TUS (v.8.6) freerdp-2:2.2.0-7.el8_6.5, freerdp-libs-2:2.2.0-7.el8_6.5, libwinpr-2:2.2.0-7.el8_6.5 +1

Fixes 11 records

TI-2026-18344 CVE-2026-22852

FreeRDP has a heap-buffer-overflow in audin_process_formats

HIGH 65

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00428 Published 2026-01-14 Partial fix · 3.20.1 CWE-787

TI-2026-19105 CVE-2026-23732

FreeRDP has heap-buffer-overflow in Glyph_Alloc

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00577 Published 2026-01-19 Partial fix · 3.21.0 CWE-122

TI-2026-24361 CVE-2026-31806

FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions

MEDIUM 49

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00682 Published 2026-03-13 Fixed in 3.24.0 CWE-122

TI-2026-19906 CVE-2026-24684

FreeRDP has a Heap-use-after-free in play_thread

MEDIUM 45

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00597 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19901 CVE-2026-24679

FreeRDP has a heap-buffer-overflow in urb_select_interface

MEDIUM 44

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00547 Published 2026-02-09 Partial fix · 3.22.0 CWE-122

TI-2026-19898 CVE-2026-24676

FreeRDP has a heap-use-after-free in audio_format_compatible

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19897 CVE-2026-24675

FreeRDP has a Heap-use-after-free in urb_select_interface

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19743 CVE-2026-24491

FreeRDP has a heap-use-after-free in video_timer

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19290 CVE-2026-23948

FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

LOW 37

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-476

TI-2026-18346 CVE-2026-22854

FreeRDP has a heap-buffer-overflow in drive_process_irp_read

LOW 33

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00531 Published 2026-01-14 Partial fix · 3.20.1 CWE-122

TI-2026-18348 CVE-2026-22856

FreeRDP has a heap-use-after-free in create_irp_thread

LOW 32

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.0033 Published 2026-01-14 Partial fix · 3.20.1 CWE-362