PT-2026-29139 · Freerdp · Freerdp

Calvinytt · Published 2026-01-01 · Updated 2026-04-28 · CVE-2026-33986

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2

Description FreeRDP is a free implementation of the Remote Desktop Protocol. In versions prior to 3.24.2, the yuv ensure buffer() function within libfreerdp/codec/h264.c updates h264->width and h264->height before the reallocation loop. If a call to winpr aligned recalloc() fails, the function returns FALSE, but the width and height variables are already inflated, potentially leading to issues.

Recommendations Update to version 3.24.2 or later.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-131

CWE-122

Related Identifiers

BDU:2026-04495

CVE-2026-33986

GHSA-H6QW-WXVM-HF97

OPENSUSE-SU-2026:10633-1

OPENSUSE-SU-2026:20657-1

SUSE-SU-2026:21436-1

Affected Products

Freerdp

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33986.json · Exploit
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 · Vendor Advisory
• https://github.com/FreeRDP/FreeRDP/commit/f6e43e208958140074ae9bb93cd0c9045a371c77 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-33986 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-33986 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10633-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33986 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04495 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33986 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33986 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33986 · Security Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://suse.com/security/cve/CVE-2026-33982 · Note
• https://suse.com/security/cve/CVE-2026-33977 · Note