PT-2026-25334 · Freerdp+1 · Freerdp+1

Rahulhoysala · Publicado 2026-01-01 · Atualizado 2026-06-15 · CVE-2026-29776

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0

Description FreeRDP is a free implementation of the Remote Desktop Protocol. An integer underflow exists in the update read cache bitmap order function within FreeRDP's Core Library.

Recommendations Update to version 3.24.0 or later.

Exploit

Correção

DoS

Integer Overflow

Integer Underflow

Resource Exhaustion

Enumeração de Fraquezas

CWE-190

CWE-789

CWE-191

CWE-400

Identificadores relacionados

BDU:2026-04140

CVE-2026-29776

GHSA-C747-X4WF-CQRR

OESA-2026-1716

OPENSUSE-SU-2026:10408-1

OPENSUSE-SU-2026:20657-1

SUSE-SU-2026:1632-1

SUSE-SU-2026:1633-1

SUSE-SU-2026:1634-1

SUSE-SU-2026:1635-1

SUSE-SU-2026:1640-1

SUSE-SU-2026:21436-1

Produtos afetados

Freerdp

Red Os

Referências · 42

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29776.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a · Correção
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-04140 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-31806 · Nota
• https://suse.com/security/cve/CVE-2026-26271 · Nota
• https://suse.com/security/cve/CVE-2026-25942 · Nota
• https://suse.com/security/cve/CVE-2026-25952 · Nota
• https://osv.dev/vulnerability/CVE-2026-29776 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-31883 · Nota
• https://suse.com/security/cve/CVE-2026-26955 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10408-1 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-freerdp3-cve-2026-29776-7.3 · Nota
• https://twitter.com/CVEnew/status/2032605919066919056 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-29776 · Nota