RHSA-2026:61378
Vulnerability from csaf_opensuse - Published: 2026-08-31 13:01 - Updated: 2026-09-18 00:06Summary
Red Hat Security Advisory: freerdp security update
Severity
Important
Notes
Topic: An update for freerdp is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses (CVE-2026-67297)
* FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)
* FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)
* FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)
* FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing (CVE-2026-67296)
* FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup (CVE-2026-67304)
* FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling (CVE-2026-67298)
* FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption (CVE-2026-73242)
* FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling (CVE-2026-73241)
* FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU (CVE-2026-63652)
* FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)
* freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode (CVE-2026-63633)
* FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure (CVE-2026-69159)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol (RDP) response. This occurs because the client incorrectly uses a smaller `alloc_hint` value instead of the actual `StubLength` for buffer capacity during response reassembly. This allows attacker-controlled data to be written beyond the intended buffer, leading to a client crash and potentially enabling arbitrary code execution.
8.8 (High)
Affected products
Fixed
65 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol (RDP) server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the client to write data beyond an allocated memory buffer. This can lead to client crashes, memory corruption, and potentially allow the malicious server to execute arbitrary code on the client system.
8.8 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Important
A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol (RDP) client can send a specially crafted Client Audio Formats Protocol Data Unit (PDU) to the server. This malformed PDU can cause a double-free vulnerability in the `rdpsnd_server_recv_formats` function, leading to the server reliably terminating. This issue can also result in allocator-dependent heap corruption, which may have further security implications.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions.
5.3 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol (RDP) Enhanced Input (RDPEI) server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory, leading to a denial of service (DoS).
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol (RDP) packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the FreeRDP server, leading to a denial of service.
7.1 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Important
A flaw was found in FreeRDP. When the `async-update` feature is enabled, a malicious or compromised Remote Desktop Protocol (RDP) server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to crash, resulting in a Denial of Service.
5.9 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A null pointer dereference flaw in FreeRDP allows a remote attacker to cause a denial of service (DoS) via specially crafted smartcard requests. If reader-state decoding fails, the system attempts to free uninitialized states during cleanup, resulting in a process crash.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a client crash, resulting in a denial of service. Additionally, this flaw may disclose sensitive information from adjacent memory.
5.4 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials.
7.5 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Important
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure.
6.4 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-55194
Threats
Impact
Moderate
References
106 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for freerdp is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses (CVE-2026-67297)\n\n* FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)\n\n* FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)\n\n* FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)\n\n* FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing (CVE-2026-67296)\n\n* FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup (CVE-2026-67304)\n\n* FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling (CVE-2026-67298)\n\n* FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption (CVE-2026-73242)\n\n* FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling (CVE-2026-73241)\n\n* FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU (CVE-2026-63652)\n\n* FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194)\n\n* freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode (CVE-2026-63633)\n\n* FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure (CVE-2026-69159)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61378",
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2509986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509986"
},
{
"category": "external",
"summary": "2509994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509994"
},
{
"category": "external",
"summary": "2510001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510001"
},
{
"category": "external",
"summary": "2510010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510010"
},
{
"category": "external",
"summary": "2510029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510029"
},
{
"category": "external",
"summary": "2510034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510034"
},
{
"category": "external",
"summary": "2510041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510041"
},
{
"category": "external",
"summary": "2514346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514346"
},
{
"category": "external",
"summary": "2514349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514349"
},
{
"category": "external",
"summary": "2519822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519822"
},
{
"category": "external",
"summary": "2519824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519824"
},
{
"category": "external",
"summary": "2519826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519826"
},
{
"category": "external",
"summary": "2519828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519828"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61378.json"
}
],
"title": "Red Hat Security Advisory: freerdp security update",
"tracking": {
"current_release_date": "2026-09-18T00:06:48+00:00",
"generator": {
"date": "2026-09-18T00:06:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:61378",
"initial_release_date": "2026-08-31T13:01:07+00:00",
"revision_history": [
{
"date": "2026-08-31T13:01:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-31T13:01:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-18T00:06:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.10?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.s390x",
"product_id": "libwinpr-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.10?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.10?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.10.src",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.10.src",
"product_id": "freerdp-2:3.10.3-12.el10_2.10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.10?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.10?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.10.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.10.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55194",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-19T18:01:17.676363+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519824"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol (RDP) response. This occurs because the client incorrectly uses a smaller `alloc_hint` value instead of the actual `StubLength` for buffer capacity during response reassembly. This allows attacker-controlled data to be written beyond the intended buffer, leading to a client crash and potentially enabling arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap buffer overflow flaw was found in FreeRDP\u0027s TS Gateway RPC client (`libfreerdp/core/gateway/rpc_client.c`). During response fragment reassembly in `rpc_client_recv_fragment`, stream allocation relies on the server-provided `alloc_hint` rather than the actual `StubLength`. A malicious TS Gateway can send a `PTYPE_RESPONSE` packet with a small `alloc_hint` and a larger payload, causing `Stream_Write` to overwrite memory beyond the fixed 4096-byte buffer (`pdu-\u003es`). This can result in client crashes or potential arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55194"
},
{
"category": "external",
"summary": "RHBZ#2519824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519824"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55194"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55194"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/9f2da52c2341cc14a96ad12e69c5b83d0bcd8b5a",
"url": "https://github.com/FreeRDP/FreeRDP/commit/9f2da52c2341cc14a96ad12e69c5b83d0bcd8b5a"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/12873",
"url": "https://github.com/FreeRDP/FreeRDP/pull/12873"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.27.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9gxm-3mf5-f5cx",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9gxm-3mf5-f5cx"
}
],
"release_date": "2026-08-19T17:50:30.158000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid connecting through untrusted TS Gateways (RD Gateways) or disable gateway parameters (such as omitting `/g:` in `xfreerdp`) to force direct RDP connections and bypass RPC response parsing.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response"
},
{
"cve": "CVE-2026-63633",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-19T18:10:58.912195+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol (RDP) server can exploit a heap buffer overflow vulnerability during Opus audio decoding. This occurs when the server negotiates Opus audio with a vulnerable client, causing the client to write data beyond an allocated memory buffer. This can lead to client crashes, memory corruption, and potentially allow the malicious server to execute arbitrary code on the client system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A heap buffer overflow vulnerability was found in FreeRDP\u0027s DSP audio codec module (`libfreerdp/codec/dsp.c`). When built with `WITH_OPUS` and without `WITH_DSP_FFMPEG`, `freerdp_dsp_decode_opus` fails to validate destination buffer capacity when handling `WAVE_FORMAT_OPUS` streams. A malicious RDP server can transmit an oversized Opus frame, causing `libopus` to write beyond the 4096-byte client buffer allocated by the `rdpsnd` channel. This leads to client heap corruption, application crashes, or potential remote code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63633"
},
{
"category": "external",
"summary": "RHBZ#2519826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63633"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/0ed1f95d36913581cf31124f94eb5843d4263eae",
"url": "https://github.com/FreeRDP/FreeRDP/commit/0ed1f95d36913581cf31124f94eb5843d4263eae"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/12993",
"url": "https://github.com/FreeRDP/FreeRDP/pull/12993"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72j9-356v-88xq",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72j9-356v-88xq"
}
],
"release_date": "2026-08-19T18:00:52.230000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, disable audio redirection on client connections by omitting audio parameters (such as `/sound` or `/audio`) in `xfreerdp` to bypass client-side DSP audio decoding.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in Opus audio decode"
},
{
"cve": "CVE-2026-63652",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-08-19T18:01:05.263358+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol (RDP) client can send a specially crafted Client Audio Formats Protocol Data Unit (PDU) to the server. This malformed PDU can cause a double-free vulnerability in the `rdpsnd_server_recv_formats` function, leading to the server reliably terminating. This issue can also result in allocator-dependent heap corruption, which may have further security implications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A double-free vulnerability exists in FreeRDP\u0027s `rdpsnd_server_recv_formats` function within the `rdpsnd` server channel. An authenticated remote RDP client can send a malformed Client Audio Formats PDU with an invalid `cbSize` parameter, causing memory to be freed without zeroing the `client_formats` pointer. Upon session teardown, `rdpsnd_server_context_free` attempts to free the dangling pointer again. This results in server process termination and potential heap corruption, causing a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63652"
},
{
"category": "external",
"summary": "RHBZ#2519822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63652"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63652",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63652"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/caf653c0ba1c75ec8f298d1baa59770102a5d14c",
"url": "https://github.com/FreeRDP/FreeRDP/commit/caf653c0ba1c75ec8f298d1baa59770102a5d14c"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/12993",
"url": "https://github.com/FreeRDP/FreeRDP/pull/12993"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9g22-w2gr-vcmp",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9g22-w2gr-vcmp"
}
],
"release_date": "2026-08-19T17:59:07.480000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable audio redirection on the FreeRDP server configuration if remote audio capability is not required.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU"
},
{
"cve": "CVE-2026-67288",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-08-01T13:02:16.978525+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510001"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate denial of service flaw affects FreeRDP in Red Hat products. When smartcard emulation is enabled, a remote attacker can exploit this vulnerability by sending malformed smartcard cache requests, leading to a null pointer dereference and subsequent termination of the FreeRDP client process. This can disrupt active remote desktop sessions for affected users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67288"
},
{
"category": "external",
"summary": "RHBZ#2510001",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510001"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67288"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67288",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67288"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-smartcard-cache",
"url": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-smartcard-cache"
}
],
"release_date": "2026-08-01T12:22:18.305000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "If smartcard redirection/emulation is unused, do not enable it (omit /smartcard and /smartcard-logon, or start with /smartcard:off). Only connect FreeRDP clients to trusted RDP endpoints",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests"
},
{
"cve": "CVE-2026-67291",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-01T13:02:45.885457+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510010"
}
],
"notes": [
{
"category": "description",
"text": "A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate heap out-of-bounds read in FreeRDP affects Red Hat products by allowing an untrusted RDP server to remotely crash a connecting client without authentication, resulting in a loss of application availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67291"
},
{
"category": "external",
"summary": "RHBZ#2510010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67291"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hgj8-g595-wfc6"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-heap-out-of-bounds-read-via-glyph-fragment-add",
"url": "https://www.vulncheck.com/advisories/freerdp-before-heap-out-of-bounds-read-via-glyph-fragment-add"
}
],
"release_date": "2026-08-01T12:22:18.322000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid connecting FreeRDP clients to untrusted or potentially malicious RDP servers. If such connections are required, run the client on a dedicated, isolated system so a client crash is contained and does not impact other workloads.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read"
},
{
"cve": "CVE-2026-67296",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2026-08-01T13:03:46.684868+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510029"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol (RDP) Enhanced Input (RDPEI) server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate denial of service (DoS) vulnerability in FreeRDP\u0027s RDPEI server channel affects systems acting as an RDP server or proxy. A remote, unauthenticated attacker can send a specially crafted RDP message to trigger excessive memory allocation, causing service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67296"
},
{
"category": "external",
"summary": "RHBZ#2510029",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510029"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67296"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67296",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67296"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jm8r-22j6-4m4v"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-rdpei-pdu",
"url": "https://www.vulncheck.com/advisories/freerdp-before-denial-of-service-via-rdpei-pdu"
}
],
"release_date": "2026-08-01T12:22:17.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this do not expose FreeRDP server/proxy/shadow (freerdp-shadow-cli / freerdp-proxy) to untrusted networks\u2014allow only trusted clients via firewall, or disable those services if unused.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing"
},
{
"cve": "CVE-2026-67297",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-01T13:01:28.197920+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509986"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client\u0027s memory, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate vulnerability in FreeRDP 3.x allows a malicious or compromised Remote Desktop Gateway to exhaust client memory by sending oversized chunked HTTP responses that bypass the 64 MiB size cap. This flaw affects FreeRDP 3.x clients connecting to untrusted endpoints; RHEL 9 and older releases ship earlier FreeRDP versions that lack this code path and are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67297"
},
{
"category": "external",
"summary": "RHBZ#2509986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67297"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67297",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67297"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c6r-4pr4-9x8m"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-resource-exhaustion-via-chunked-http-response",
"url": "https://www.vulncheck.com/advisories/freerdp-before-resource-exhaustion-via-chunked-http-response"
}
],
"release_date": "2026-08-01T12:22:16.977000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue, FreeRDP clients should only connect to trusted Remote Desktop Gateway endpoints. Avoiding connections to untrusted or potentially compromised gateways will prevent exposure to malicious servers that could exploit this vulnerability by sending oversized chunked HTTP responses.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses"
},
{
"cve": "CVE-2026-67298",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-08-01T13:04:25.188753+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510041"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol (RDP) packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the FreeRDP server, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A heap buffer overflow in the FreeRDP server-side RAIL channel handler can be exploited by a malicious or compromised RDP client, leading to a denial of service. This vulnerability impacts the availability of remote desktop services on Red Hat systems by causing the RDP server to crash. Exploitation requires the RDP server to be active and reachable by an attacker.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67298"
},
{
"category": "external",
"summary": "RHBZ#2510041",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510041"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67298",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67298"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67298",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67298"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/46848765f2a1134f8652f8760eefb5e85d64a9b8",
"url": "https://github.com/FreeRDP/FreeRDP/commit/46848765f2a1134f8652f8760eefb5e85d64a9b8"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qmvw-52ph-q5pv"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-via-rail-orderlength-underflow",
"url": "https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-via-rail-orderlength-underflow"
}
],
"release_date": "2026-08-01T12:22:18.323000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue do not expose FreeRDP server/proxy/shadow (freerdp-shadow-cli / freerdp-proxy) to untrusted networks\u2014allow only trusted clients via firewall, or disable those services if unused.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling"
},
{
"cve": "CVE-2026-67301",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-01T13:01:53.731118+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509994"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. When the `async-update` feature is enabled, a malicious or compromised Remote Desktop Protocol (RDP) server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to crash, resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate out-of-bounds read flaw in FreeRDP allows a malicious server to cause memory disclosure or crash the client, but only when the non-default async-update feature is explicitly enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67301"
},
{
"category": "external",
"summary": "RHBZ#2509994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509994"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67301"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67301",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67301"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f",
"url": "https://github.com/FreeRDP/FreeRDP/commit/5370fb26fbf034ecd11d3026b6ad639b5fff493f"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vxp3-7g6q-rq2w"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-out-of-bounds-read-via-polygon-async-message-proxy",
"url": "https://www.vulncheck.com/advisories/freerdp-before-out-of-bounds-read-via-polygon-async-message-proxy"
}
],
"release_date": "2026-08-01T12:22:16.955000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid enabling the `async-update` feature when using FreeRDP clients. This feature is not enabled by default. If `xfreerdp` is used, ensure the `/async-update` command-line option is not specified. Disabling this feature may impact performance in certain RDP sessions where asynchronous updates are beneficial.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders"
},
{
"cve": "CVE-2026-67304",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-08-01T13:04:02.411807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510034"
}
],
"notes": [
{
"category": "description",
"text": "A null pointer dereference flaw in FreeRDP allows a remote attacker to cause a denial of service (DoS) via specially crafted smartcard requests. If reader-state decoding fails, the system attempts to free uninitialized states during cleanup, resulting in a process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate-impact vulnerability causes a denial of service (DoS) in FreeRDP clients and proxies. If smartcard redirection is enabled, an attacker (via a malicious server or proxy client) can send specially crafted smartcard IRP requests to trigger a null pointer dereference during cleanup.\n\nNote: FreeRDP packages shipped in Red Hat Enterprise Linux (RHEL) 9 and older are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67304"
},
{
"category": "external",
"summary": "RHBZ#2510034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510034"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67304"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/1cc783d4c78bd2f66d3a8582dfe70a663d141444",
"url": "https://github.com/FreeRDP/FreeRDP/commit/1cc783d4c78bd2f66d3a8582dfe70a663d141444"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78jj-45vh-jpm5"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-null-dereference-via-smartcard-cleanup",
"url": "https://www.vulncheck.com/advisories/freerdp-before-null-dereference-via-smartcard-cleanup"
}
],
"release_date": "2026-08-01T12:22:17.489000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable smartcard redirection in FreeRDP client configurations if smartcard functionality is not required. This can typically be achieved by launching the `xfreerdp` client without the `/smartcard` option, or by explicitly setting `/smartcard:no` if a configuration file is used. Disabling smartcard redirection will prevent the use of smartcard devices with FreeRDP sessions.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup"
},
{
"cve": "CVE-2026-69159",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-19T18:11:09.684632+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519828"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client\u0027s decoder to read beyond its allocated buffer, which can lead to a client crash, resulting in a denial of service. Additionally, this flaw may disclose sensitive information from adjacent memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An out-of-bounds read vulnerability was found in FreeRDP\u0027s planar bitmap decoder (`libfreerdp/codec/planar.c`). Functions `planar_decompress_plane_rle` and `planar_decompress_plane_rle_only` fail to verify that the source buffer contains the required raw bytes specified by a control byte. A malicious RDP server can send a truncated planar bitmap or surface update claiming additional raw bytes, causing the client to read past the source buffer boundary. This can lead to a client application crash or partial disclosure of adjacent client memory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69159"
},
{
"category": "external",
"summary": "RHBZ#2519828",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519828"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69159"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69159",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69159"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/75a1ec61d444179ea64a4ec0835214cb9c4f7c18",
"url": "https://github.com/FreeRDP/FreeRDP/commit/75a1ec61d444179ea64a4ec0835214cb9c4f7c18"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/13016",
"url": "https://github.com/FreeRDP/FreeRDP/pull/13016"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.29.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.29.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3"
}
],
"release_date": "2026-08-19T18:02:01.016000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, disable RDP planar graphics codec acceleration in client settings or force alternative graphics rendering modes (such as standard RemoteFX or H.264) when connecting to untrusted RDP servers.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure"
},
{
"cve": "CVE-2026-73241",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2026-08-11T20:01:05.796317+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514349"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in FreeRDP\u0027s server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important flaw in FreeRDP 3.0+ allows remote, unauthenticated attackers to bypass authentication and gain session access. This vulnerability only affects servers explicitly configured with the non-default RdstlsSecurity = TRUE setting. Because RDSTLS was introduced in version 3.0, RHEL 9 and older releases are completely unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73241"
},
{
"category": "external",
"summary": "RHBZ#2514349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514349"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73241",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73241"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73241",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73241"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"url": "https://github.com/FreeRDP/FreeRDP/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/13065",
"url": "https://github.com/FreeRDP/FreeRDP/pull/13065"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x"
}
],
"release_date": "2026-08-11T19:47:27.859000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "Do not enable RDSTLS server authentication (RdstlsSecurity); it is disabled by default. If FreeRDP is deployed as an RDP server with RDSTLS enabled, disable RdstlsSecurity",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling"
},
{
"cve": "CVE-2026-73242",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-11T20:00:55.131631+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514346"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in FreeRDP\u0027s Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important out-of-bounds memory vulnerability in FreeRDP\u0027s CredSSP/NLA Kerberos decryption allows a malicious RDP endpoint to execute arbitrary code or expose sensitive information on connected clients and servers. This flaw only affects FreeRDP 3.0.0 and newer, meaning RHEL 9 and older versions are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73242"
},
{
"category": "external",
"summary": "RHBZ#2514346",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514346"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73242"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/0adf5e30d01be84e190a359a7bdd37bc51d740cc",
"url": "https://github.com/FreeRDP/FreeRDP/commit/0adf5e30d01be84e190a359a7bdd37bc51d740cc"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/pull/13065",
"url": "https://github.com/FreeRDP/FreeRDP/pull/13065"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v"
}
],
"release_date": "2026-08-11T19:49:46.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T13:01:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61378"
},
{
"category": "workaround",
"details": "Use FreeRDP with Kerberos/NLA only against trusted RDP peers. As a client, avoid connecting to untrusted RDP servers; as a server, restrict inbound RDP to trusted clients using host firewall rules or network segmentation.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.10.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.10.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…