PT-2026-3458 · Freerdp+3 · Freerdp+3

Ehdgks0627

·

Published

2026-01-01

·

Updated

2026-03-29

·

CVE-2026-23533

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.21.0
Description A heap buffer overflow exists in the RDPGFX ClearCodec decode path when processing maliciously crafted residual data, leading to out-of-bounds writes during color output. This can cause a denial-of-service (DoS) condition and potential heap corruption, potentially allowing code execution depending on the allocator and heap layout. A malicious server can trigger this issue on the client side.
Recommendations Update to version 3.21.0 or later.

Exploit

Fix

DoS

RCE

Heap Based Buffer Overflow

Weakness Enumeration

Related Identifiers

ALSA-2026:2048
ALSA-2026:2081
ALSA-2026:2222
BDU:2026-00658
CVE-2026-23533
GHSA-32Q9-M5QR-9J2V
MGASA-2026-0046
OESA-2026-1516
OESA-2026-1517
OESA-2026-1518
OESA-2026-1519
OESA-2026-1520
OESA-2026-1521
OPENSUSE-SU-2026:10107-1
OPENSUSE-SU-2026:10459-1
OPENSUSE-SU-2026:20339-1
OPENSUSE-SU-2026:20632-1
RHSA-2026:2048
RHSA-2026:2081
RHSA-2026:2222
RHSA-2026:2714
RHSA-2026:2736
RHSA-2026:2770
RHSA-2026:2824
RHSA-2026:2952
RHSA-2026:3036
RHSA-2026:3037
RHSA-2026:3038
RHSA-2026:3039
RHSA-2026:3041
SUSE-SU-2026:0345-1
SUSE-SU-2026:0656-1
SUSE-SU-2026:0683-1
SUSE-SU-2026:0761-1
SUSE-SU-2026:0762-1
USN-8004-1
USN-8004-2
USN-8105-1

Affected Products

Freerdp
Linuxmint
Rocky Linux
Ubuntu