PT-2026-22022 · Freerdp+3 · Freerdp+3

Ilja Van Sprundel · Published 2026-02-25 · Updated 2026-05-22 · CVE-2026-27951

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0

Description The Stream EnsureCapacity function in FreeRDP versions prior to 3.23.0 can create an endless blocking loop. This issue may affect all client and server implementations using FreeRDP. Exploitation is practical on 32bit systems with physical memory greater than or equal to SIZE MAX.

Recommendations Update to version 3.23.0 or later.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2026:16019

ALSA-2026:16482

BDU:2026-04157

CVE-2026-27951

GHSA-QCFC-GHXR-H927

OESA-2026-2439

OESA-2026-2440

OESA-2026-2441

OESA-2026-2442

OPENSUSE-SU-2026:10611-1

OPENSUSE-SU-2026:20632-1

SUSE-SU-2026:1632-1

SUSE-SU-2026:1633-1

SUSE-SU-2026:1634-1

SUSE-SU-2026:1635-1

SUSE-SU-2026:1640-1

USN-8105-1

USN-8105-2

Affected Products

Freerdp

Linuxmint

Rocky Linux

Ubuntu

References · 103

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27951.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113 · Patch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-16019.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:16482 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27951 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23531 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-29775 · Security Note
• https://ubuntu.com/security/CVE-2026-25952 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-16482.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2440 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23883 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04157 · Security Note