FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are updated before the reallocation loop. If any winpr_aligned_recalloc() call fails, the function returns FALSE but width/height are already inflated. This issue has been patched in version 3.24.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp | Apr 1, 2026 | Mar 30, 2026 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade libwinprUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-serverUpgrade libwinpr-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-server-debuginfoUpgrade libwinprUpgrade freerdp-develUpgrade freerdp-libs-debuginfo | Apr 14, 2026 | Mar 30, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3Upgrade freerdp3-x11Upgrade freerdp-x11 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub