PT-2026-29140 · Freerdp · Freerdp

Calvinytt · Published 2026-01-01 · Updated 2026-05-11 · CVE-2026-33987

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.24.2

Description FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an issue exists in the persistent cache read entry v3() function within libfreerdp/cache/persistent.c. Specifically, the persistent->bmpSize variable is updated before the winpr aligned recalloc() function is called. If the realloc operation fails, bmpSize becomes inflated while bmpData continues to point to the original buffer.

Recommendations Update to version 3.24.2 or later.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-131

CWE-122

Related Identifiers

ALSA-2026:16014

BDU:2026-04673

CVE-2026-33987

GHSA-FF8H-P5VC-WCWC

OPENSUSE-SU-2026:10633-1

OPENSUSE-SU-2026:20657-1

SUSE-SU-2026:21436-1

Affected Products

Freerdp

References · 46

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33987.json · Exploit
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ff8h-p5vc-wcwc · Vendor Advisory
• https://github.com/FreeRDP/FreeRDP/commit/1a890eb43492b5eb707cb3dd6fc908f696e8fc1c · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10633-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33987 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33987 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33987 · Security Note
• https://bdu.fstec.ru/vul/2026-04673 · Security Note
• https://ubuntu.com/security/CVE-2026-33987 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-33987 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-16014.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-33987 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:16014 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33987 · Vendor Advisory
• https://bugzilla.redhat.com/2447386 · Note