TI-2026-32363 CVE-2026-44422
FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion
Priority HIGH 73
FreeRDP is a free implementation of the Remote Desktop Protocol.
RHSA-2026:36203
freerdp security update
Released 2026-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) freerdp-2:3.10.3-12.el10_2.6, freerdp-libs-2:3.10.3-12.el10_2.6, libwinpr-2:3.10.3-12.el10_2.6
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) freerdp-devel-2:3.10.3-12.el10_2.6, freerdp-server-2:3.10.3-12.el10_2.6, libwinpr-devel-2:3.10.3-12.el10_2.6
Fixes 5 records
TI-2026-32362 CVE-2026-44421
FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass
Priority HIGH 73
FreeRDP is a free implementation of the Remote Desktop Protocol.
TI-2026-32361 CVE-2026-44420
FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS
Priority HIGH 73
FreeRDP is a free implementation of the Remote Desktop Protocol.
TI-2026-28876 CVE-2026-40033 · GHSA-xmr8-h8p4-932m
FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass
Priority HIGH 72
FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory.
Priority HIGH 69
FreeRDP is a free implementation of the Remote Desktop Protocol.