Red Hat Security Advisory

RHSA-2026:16014

freerdp security update

Released 2026-05-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) freerdp-2:3.10.3-5.el10_1.8, freerdp-libs-2:3.10.3-5.el10_1.8, libwinpr-2:3.10.3-5.el10_1.8
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) freerdp-devel-2:3.10.3-5.el10_1.8, freerdp-server-2:3.10.3-5.el10_1.8, libwinpr-devel-2:3.10.3-5.el10_1.8

Fixes 10 records

TI-2026-24435 CVE-2026-31883

FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write

HIGH 81

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00337 Published 2026-03-13 Partial fix · 3.24.0 CWE-122

TI-2026-23361 CVE-2026-29775

FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId

HIGH 75

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00328 Published 2026-03-13 Partial fix · 3.24.0 CWE-787

TI-2026-24437 CVE-2026-31885

FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks

HIGH 74

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0028 Published 2026-03-13 Fixed in 3.24.0 CWE-125

TI-2026-24436 CVE-2026-31884

FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0

HIGH 66

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2026-03-13 Partial fix · 3.24.0 CWE-369

TI-2026-21011 CVE-2026-25997

FreeRDP has heap-use-after-free in xf_clipboard_format_equal

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00651 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-20977 CVE-2026-25952

FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00687 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-21465 CVE-2026-26986

FreeRDP has heap-use-after-free in rail_window_free

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00557 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-26323 CVE-2026-33982

FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read

LOW 37

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00194 Published 2026-03-30 Partial fix · 3.24.2 CWE-125

TI-2026-26326 CVE-2026-33985

FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read

LOW 31

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-03-30 Partial fix · 3.24.2 CWE-125

TI-2026-26328 CVE-2026-33987

FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write

LOW 30

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00104 Published 2026-03-30 Partial fix · 3.24.2 CWE-122