Red Hat Security Advisory

RHSA-2026:19033

freerdp security update

Released 2026-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) freerdp-2:3.10.3-12.el10_2.2, freerdp-libs-2:3.10.3-12.el10_2.2, libwinpr-2:3.10.3-12.el10_2.2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) freerdp-devel-2:3.10.3-12.el10_2.2, freerdp-server-2:3.10.3-12.el10_2.2, libwinpr-devel-2:3.10.3-12.el10_2.2

Fixes 23 records

TI-2026-21450 CVE-2026-26965

FreeRDP has Out-of-bounds Write

HIGH 73

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00688 Published 2026-02-25 Fixed in 3.23.0 CWE-787

TI-2026-21441 CVE-2026-26955

FreeRDP has Out-of-bounds Write

HIGH 73

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2026-02-25 Fixed in 3.23.0 CWE-787

TI-2026-18345 CVE-2026-22853

FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array

HIGH 65

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00777 Published 2026-01-14 Partial fix · 3.20.1 CWE-787

TI-2026-18344 CVE-2026-22852

FreeRDP has a heap-buffer-overflow in audin_process_formats

HIGH 65

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00428 Published 2026-01-14 Partial fix · 3.20.1 CWE-787

TI-2026-19105 CVE-2026-23732

FreeRDP has heap-buffer-overflow in Glyph_Alloc

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00577 Published 2026-01-19 Partial fix · 3.21.0 CWE-122

TI-2026-18351 CVE-2026-22859

FreeRDP has a heap-buffer-overflow in urb_select_configuration

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.6 Network No auth User interaction EPSS 0.00888 Published 2026-01-14 Partial fix · 3.20.1 CWE-125

TI-2026-18350 CVE-2026-22858

FreeRDP has a global-buffer-overflow in crypto_base64_decode

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.6 Network No auth User interaction EPSS 0.00703 Published 2026-01-14 Partial fix · 3.20.1 CWE-125

TI-2026-18347 CVE-2026-22855

FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.6 Network No auth User interaction EPSS 0.00888 Published 2026-01-14 Partial fix · 3.20.1 CWE-125

TI-2026-24361 CVE-2026-31806

FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions

MEDIUM 49

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00682 Published 2026-03-13 Fixed in 3.24.0 CWE-122

TI-2026-19906 CVE-2026-24684

FreeRDP has a Heap-use-after-free in play_thread

MEDIUM 45

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00597 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19900 CVE-2026-24678

FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread

MEDIUM 45

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00703 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19905 CVE-2026-24683

FreeRDP has a heap-use-after-free in ainput_send_input_event

MEDIUM 44

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19904 CVE-2026-24682

FreeRDP has a Heap-buffer-overflow in audio_formats_free

MEDIUM 44

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-122

TI-2026-19903 CVE-2026-24681

FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb

MEDIUM 44

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19901 CVE-2026-24679

FreeRDP has a heap-buffer-overflow in urb_select_interface

MEDIUM 44

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00547 Published 2026-02-09 Partial fix · 3.22.0 CWE-122

TI-2026-19898 CVE-2026-24676

FreeRDP has a heap-use-after-free in audio_format_compatible

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19897 CVE-2026-24675

FreeRDP has a Heap-use-after-free in urb_select_interface

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19743 CVE-2026-24491

FreeRDP has a heap-use-after-free in video_timer

MEDIUM 40

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-416

TI-2026-19290 CVE-2026-23948

FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

LOW 37

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00523 Published 2026-02-09 Partial fix · 3.22.0 CWE-476

TI-2026-26325 CVE-2026-33984

FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

LOW 35

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00405 Published 2026-03-30 Partial fix · 3.24.2 CWE-122

TI-2026-18346 CVE-2026-22854

FreeRDP has a heap-buffer-overflow in drive_process_irp_read

LOW 33

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00531 Published 2026-01-14 Partial fix · 3.20.1 CWE-122

TI-2026-18348 CVE-2026-22856

FreeRDP has a heap-use-after-free in create_irp_thread

LOW 32

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.0033 Published 2026-01-14 Partial fix · 3.20.1 CWE-362

TI-2026-26324 CVE-2026-33983

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

LOW 29

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00442 Published 2026-03-30 Partial fix · 3.24.2 CWE-190