Red Hat Security Advisory

RHSA-2026:94510

freerdp security update

Released 2026-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) freerdp-2:2.11.7-15.el8_10, freerdp-libs-2:2.11.7-15.el8_10, libwinpr-2:2.11.7-15.el8_10 +1
Red Hat Enterprise Linux CRB (v. 8) freerdp-devel-2:2.11.7-15.el8_10

Fixes 3 records

TI-2026-71058 CVE-2026-109242 · GHSA-wx7m-cfxv-x2x7

Uninitialized heap memory disclosure in FreeRDP progressive codec

MEDIUM 64

FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2026-10-12 Partial fix · 3.0.0, 3.32.0 CWE-908

TI-2026-74527 CVE-2026-110837

Heap buffer overflow in FreeRDP MP3 audio decoding

MEDIUM 62

FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as sho…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-10-14 Partial fix · 3.32.0 CWE-122

TI-2026-76089 CVE-2026-111880 · GHSA-98x3-97xw-cfqr

Heap out-of-bounds write in FreeRDP NTLM authentication handling

LOW 36

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00321 Published 2026-10-17 Partial fix · 3.32.0 CWE-787