FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX surface updates. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.
CVSS Details
- CVSS 4.0 Base Score: 7.7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade freerdpUpgrade libwinpr-devel | Feb 9, 2026 | Feb 5, 2026 |
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Jan 19, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-serverUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debugsourceUpgrade freerdp-server-debuginfoUpgrade freerdp-devel | Feb 10, 2026 | Jan 19, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-serverUpgrade libwinpr-develUpgrade freerdp | Feb 9, 2026 | Jan 19, 2026 |
| Redhat_linux | — | Upgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-server-debuginfoUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-debugsourceNo solution existsUpgrade freerdp-server | Feb 10, 2026 | Jan 19, 2026 |
| Rocky_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade freerdp-serverUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-server-debuginfo | Feb 9, 2026 | Feb 6, 2026 |
| Suse | — | Upgrade libfreerdp3-3Upgrade freerdp-waylandUpgrade freerdp-develUpgrade winpr-develUpgrade uwac0-0-develUpgrade freerdp-serverUpgrade libwinpr2-2Upgrade freerdpUpgrade freerdp2Upgrade libfreerdp2-2Upgrade freerdp-proxyUpgrade freerdp-proxy-pluginsUpgrade winpr2-develUpgrade freerdp-sdlUpgrade freerdp2-develUpgrade freerdp2-proxyUpgrade libuwac0-0Upgrade freerdp2-serverUpgrade librdtk0-0Upgrade libfreerdp-server-proxy3-3Upgrade libwinpr3-3 | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp2-2Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp3-3 | Feb 4, 2026 | Jan 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub