PT-2026-25334 · Freerdp · Freerdp

Rahulhoysala · Published 2026-01-01 · Updated 2026-03-27 · CVE-2026-29776

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.0

Description FreeRDP is a free implementation of the Remote Desktop Protocol. An integer underflow exists in the update read cache bitmap order function within FreeRDP's Core Library.

Recommendations Update to version 3.24.0 or later.

Exploit

Fix

Resource Exhaustion

Integer Underflow

Integer Overflow

Weakness Enumeration

CWE-400

CWE-191

CWE-190

CWE-789

Related Identifiers

BDU:2026-04140

CVE-2026-29776

GHSA-C747-X4WF-CQRR

OESA-2026-1716

OPENSUSE-SU-2026:10408-1

OPENSUSE-SU-2026:20657-1

SUSE-SU-2026:1632-1

SUSE-SU-2026:1633-1

SUSE-SU-2026:1634-1

SUSE-SU-2026:1635-1

SUSE-SU-2026:1640-1

SUSE-SU-2026:21436-1

Affected Products

Freerdp

References · 40

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29776.json · Exploit
• https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a · Patch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10408-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-29776 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-29776 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-29776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-29776 · Security Note
• https://ubuntu.com/security/CVE-2026-29776 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-29776 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1716 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04140 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-29776 · Security Note
• https://freerdp.com/2026/03/13/3_24_0-release · Note
• https://suse.com/security/cve/CVE-2026-25955 · Note