FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.
CVSS Details
- CVSS 4.0 Base Score: 7.7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr | Feb 9, 2026 | Feb 5, 2026 |
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Jan 19, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade libwinpr-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-server-debuginfoUpgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-serverUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-libs-debuginfo | Feb 10, 2026 | Jan 19, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade libwinprUpgrade freerdp-libsUpgrade freerdp-serverUpgrade freerdp-develUpgrade freerdpUpgrade libwinpr-devel | Feb 9, 2026 | Jan 19, 2026 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade freerdp-serverUpgrade freerdpUpgrade freerdp-libs-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libsNo solution existsUpgrade freerdp-develUpgrade libwinpr | Feb 10, 2026 | Jan 19, 2026 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debugsourceUpgrade freerdp-serverUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-server-debuginfo | Feb 9, 2026 | Feb 6, 2026 |
| Suse | — | Upgrade libwinpr2-2Upgrade freerdp-proxy-pluginsUpgrade libfreerdp2-2Upgrade freerdp2Upgrade freerdp-serverUpgrade libfreerdp3-3Upgrade freerdp-waylandUpgrade winpr-develUpgrade uwac0-0-develUpgrade freerdp-proxyUpgrade winpr2-develUpgrade freerdp2-develUpgrade libwinpr3-3Upgrade freerdp-sdlUpgrade freerdp2-serverUpgrade freerdpUpgrade libfreerdp-server-proxy3-3Upgrade freerdp-develUpgrade libuwac0-0Upgrade librdtk0-0Upgrade freerdp2-proxy | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade libfreerdp2-2Upgrade libfreerdp3-3 | Feb 4, 2026 | Jan 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub