The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode_opus in libfreerdp/codec/dsp.c calls Stream_EnsureRemainingCapacity on context->common.buffer even though opus_decode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that negotiates WAVE_FORMAT_OPUS with a client built with WITH_OPUS enabled and WITH_DSP_FFMPEG disabled can make libopus write a large decoded frame beyond the 4096-byte StreamPool_Take destination used by channels/rdpsnd/client/rdpsnd_main.c. This can corrupt the client heap, crash the client, and may permit code execution. This issue is fixed in version 3.28.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade freerdp-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade freerdp-server-debuginfoUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp-serverUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsource | Sep 30, 2026 | Aug 19, 2026 |
| Redhat_linux | — | Upgrade libwinprUpgrade freerdpUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade libwinpr-develUpgrade freerdp-serverUpgrade freerdp-debugsourceUpgrade freerdp-libsUpgrade libwinpr-debuginfo | Aug 24, 2026 | Aug 19, 2026 |
| Rocky_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade libwinprUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade freerdp-serverUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdp-libs | Sep 3, 2026 | Sep 1, 2026 |
| Ubuntu | — | Upgrade freerdp3 | Aug 30, 2026 | Aug 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub