RHSA-2026:36203HighCVSS 8.8

Red Hat Security Advisory: freerdp security update

Published
July 7, 2026
Last Modified
July 17, 2026

🔗 CVE IDs covered (5)

CVE-2026-40033 →CVE-2026-44420 →CVE-2026-44421 →CVE-2026-44422 →CVE-2026-45700 →

📋 Description

CVE-2026-40033 — freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface CVE-2026-44420 — freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow CVE-2026-44421 — freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs CVE-2026-44422 — freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser CVE-2026-45700 — freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution

🔗 References (8)