RHSA-2026:6743HighCVSS 8.8

Red Hat Security Advisory: freerdp security update

Published
April 7, 2026
Last Modified
June 8, 2026

🔗 CVE IDs covered (14)

CVE-2026-23732 →CVE-2026-23948 →CVE-2026-24491 →CVE-2026-24679 →CVE-2026-24681 →CVE-2026-24682 →CVE-2026-24683 →CVE-2026-24684 →CVE-2026-22852 →CVE-2026-22854 →CVE-2026-22856 →CVE-2026-24675 →CVE-2026-24676 →CVE-2026-31806 · pending

📋 Description

CVE-2026-22852 — freerdp: FreeRDP heap-buffer-overflow CVE-2026-22854 — freerdp: FreeRDP heap-buffer-overflow CVE-2026-22856 — freerdp: FreeRDP heap-use-after-free CVE-2026-23732 — freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow CVE-2026-23948 — freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() CVE-2026-24491 — freerdp: FreeRDP has a heap-use-after-free in video_timer CVE-2026-24675 — freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface CVE-2026-24676 — freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation CVE-2026-24679 — freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface CVE-2026-24681 — freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb CVE-2026-24682 — freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free CVE-2026-24683 — freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event CVE-2026-24684 — freerdp: FreeRDP has a Heap-use-after-free in play_thread CVE-2026-31806 — freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages

🔗 References (17)