FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s `gdi_SurfaceToSurface` path due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.
CVSS Details
- CVSS 4.0 Base Score: 7.7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdpUpgrade libwinpr-devel | Feb 9, 2026 | Feb 5, 2026 |
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Jan 19, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwinpr-develUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libwinprUpgrade freerdpUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-server | Feb 10, 2026 | Jan 19, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-libsUpgrade freerdp-server | Feb 9, 2026 | Jan 19, 2026 |
| Redhat_linux | — | Upgrade libwinprUpgrade freerdp-server-debuginfoUpgrade freerdp-develNo solution existsUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdp-server | Feb 10, 2026 | Jan 19, 2026 |
| Rocky_linux | — | Upgrade libwinprUpgrade freerdpUpgrade freerdp-server-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-serverUpgrade freerdp-libsUpgrade freerdp-debugsource | Feb 9, 2026 | Feb 6, 2026 |
| Suse | — | Upgrade freerdp2-develUpgrade libwinpr3-3Upgrade freerdp-serverUpgrade freerdpUpgrade libuwac0-0Upgrade winpr2-develUpgrade uwac0-0-develUpgrade libfreerdp-server-proxy3-3Upgrade winpr-develUpgrade librdtk0-0Upgrade libwinpr2-2Upgrade freerdp-develUpgrade libfreerdp2-2Upgrade freerdp-proxy-pluginsUpgrade freerdp2-proxyUpgrade freerdp-sdlUpgrade libfreerdp3-3Upgrade freerdp-waylandUpgrade freerdp2Upgrade freerdp2-serverUpgrade freerdp-proxy | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3Upgrade libfreerdp2-2Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade libfreerdp2-2t64 (Ubuntu Pro) | Feb 4, 2026 | Jan 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub