FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied DeviceName and VirtualChannelName fields for a NUL terminator in channels/rdpecam/server/camera_device_enumerator_main.c and then dereference once past the scan bound, allowing a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. This issue is fixed in version 3.28.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp | Jul 15, 2026 | Jul 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade libwinprUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-server-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-server | Aug 10, 2026 | Jul 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jul 10, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3Upgrade freerdp3-x11Upgrade freerdp-x11 | Jul 21, 2026 | Jul 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub