FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnerability is fixed in 3.22.0.
CVSS Details
- CVSS 4.0 Base Score: 8.7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Feb 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-develUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-libsUpgrade libwinpr-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-server-debuginfoUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade libwinprUpgrade freerdp-server | Mar 9, 2026 | Feb 9, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 9, 2026 |
| Ubuntu | — | Upgrade freerdp2-x11Upgrade freerdp3-x11Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade freerdp2-x11 (Ubuntu Pro)Upgrade libfreerdp2-2Upgrade libfreerdp3-3 | Feb 17, 2026 | Feb 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub