← Back

CVE-2026-33985

nvd nist
Published: Mar 30, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Exploitability: 2.8 / Impact: 4.2
Source: NVD

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2.

Affected (1)

Products: Freerdp: Freerdp
Freerdp
1 product
Freerdp
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Freerdp
Before 3.24.2

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-131
Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

References (2)

Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
PatchVendor Advisory

Timeline

No history available yet.