RHSA-2026:75570
Vulnerability from csaf_opensuse - Published: 2026-10-05 05:19 - Updated: 2026-10-08 12:01Summary
Red Hat Security Advisory: freerdp security update
Severity
Important
Notes
Topic: An update for freerdp is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU (CVE-2026-85089)
* FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954)
* FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964)
* FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU (CVE-2026-91946)
* FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956)
* FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963)
* FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption (CVE-2026-91947)
* FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959)
* FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure (CVE-2026-91950)
* FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR (CVE-2026-91960)
* FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units (PDUs) use Stream_Seek instead of Stream_Zero for reserved padding fields, leading to the transmission of uninitialized heap memory that may contain cleartext credentials from previous sessions.
6.5 (Medium)
Affected products
Fixed
65 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit (PDU) serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of sensitive data, including live pointers and GLib function addresses, which could defeat Address Space Layout Randomization (ASLR) and reveal the GLib module's base address.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP server. This use-after-free vulnerability exists in the DRDYNVC parser, where a channel pointer is dereferenced after its synchronization lock has been released. An authenticated client can exploit this by racing AUDIN channel closure messages against DRDYNVC data parsing, leading to memory corruption. This could potentially result in arbitrary code execution or a denial of service.
7.5 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Important
A flaw was found in FreeRDP, where an out-of-bounds read vulnerability exists in the rdpdr_dump_packet function. This is due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a specially crafted RDPDR packet, bypassing security checks and causing the client to read memory beyond the intended buffer. This can result in client crashes, leading to a denial of service, or the disclosure of sensitive heap memory information in logs. Exploitation requires the client to have WLOG_TRACE-level logging enabled.
7.1 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Important
A flaw was found in FreeRDP. A malicious RDP (Remote Desktop Protocol) server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU (Protocol Data Unit) with an oversized LB_LOAD_BALANCE_INFO field, an attacker could cause a denial of service or heap corruption on the client system.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can trigger a null pointer dereference in the `gdi_surface_bits` function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disabled in the client. Successful exploitation allows a remote attacker to cause a FreeRDP client to crash, leading to a denial of service.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can exploit an out-of-bounds read vulnerability in the URBDRC (USB device redirection) channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to a client crash and a denial of service.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC (Remote Procedure Call) gateway transport parser by sending a malicious BIND_ACK Protocol Data Unit (PDU) with a truncated result entry. This can lead to a process abort, resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the `Stream_EnsureRemainingCapacity` function, leading to an integer wraparound and a double free vulnerability. Successful exploitation results in a denial of service, causing the FreeRDP client to crash during connection.
6.5 (Medium)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Moderate
A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol (RDP) server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This information disclosure can defeat Address Space Layout Randomization (ASLR), potentially enabling remote code execution when chained with other memory corruption vulnerabilities.
8.8 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Important
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can exploit a heap-based buffer overflow vulnerability in the `nego_send_negotiation_request` function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled `LoadBalanceInfo` field, the server can write an arbitrary-length field into a fixed-size buffer without proper validation. This can lead to a denial of service (client crash) or, when chained with a memory disclosure vulnerability, potentially remote code execution on the client system.
8.8 (High)
Affected products
Fixed
65 products, the same list as for
CVE-2026-85089
Threats
Impact
Important
References
85 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for freerdp is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU (CVE-2026-85089)\n\n* FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command (CVE-2026-91954)\n\n* FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU (CVE-2026-91964)\n\n* FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU (CVE-2026-91946)\n\n* FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel (CVE-2026-91956)\n\n* FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure (CVE-2026-91963)\n\n* FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption (CVE-2026-91947)\n\n* FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway (CVE-2026-91959)\n\n* FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure (CVE-2026-91950)\n\n* FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR (CVE-2026-91960)\n\n* FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption. (CVE-2026-91953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:75570",
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2527811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527811"
},
{
"category": "external",
"summary": "2533906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533906"
},
{
"category": "external",
"summary": "2533911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533911"
},
{
"category": "external",
"summary": "2533913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533913"
},
{
"category": "external",
"summary": "2533927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533927"
},
{
"category": "external",
"summary": "2533930",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533930"
},
{
"category": "external",
"summary": "2533942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533942"
},
{
"category": "external",
"summary": "2533951",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533951"
},
{
"category": "external",
"summary": "2533954",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533954"
},
{
"category": "external",
"summary": "2533957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533957"
},
{
"category": "external",
"summary": "2533959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533959"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75570.json"
}
],
"title": "Red Hat Security Advisory: freerdp security update",
"tracking": {
"current_release_date": "2026-10-08T12:01:21+00:00",
"generator": {
"date": "2026-10-08T12:01:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:75570",
"initial_release_date": "2026-10-05T05:19:49+00:00",
"revision_history": [
{
"date": "2026-10-05T05:19:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-05T05:19:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-08T12:01:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.src",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.src",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.14?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.14?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.14?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.s390x",
"product_id": "libwinpr-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.14?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_id": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.14?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
},
"product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-85089",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"discovery_date": "2026-09-03T01:10:56.240368+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units (PDUs) use Stream_Seek instead of Stream_Zero for reserved padding fields, leading to the transmission of uninitialized heap memory that may contain cleartext credentials from previous sessions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85089"
},
{
"category": "external",
"summary": "RHBZ#2527811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85089"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85089",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85089"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP",
"url": "https://github.com/FreeRDP/FreeRDP"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/blob/3.30.0/libfreerdp/core/info.c#L1541",
"url": "https://github.com/FreeRDP/FreeRDP/blob/3.30.0/libfreerdp/core/info.c#L1541"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/056cede398d71c1f2540baebc26ec3327a249301",
"url": "https://github.com/FreeRDP/FreeRDP/commit/056cede398d71c1f2540baebc26ec3327a249301"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea",
"url": "https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.0",
"url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.0"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v649-94v2-p72q",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v649-94v2-p72q"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-information-disclosure-via-uninitialized-heap-memory",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-information-disclosure-via-uninitialized-heap-memory"
}
],
"release_date": "2026-09-03T01:04:43.093000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU"
},
{
"cve": "CVE-2026-91946",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-09-15T15:34:50.211755+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server\u0027s ResetGraphics Protocol Data Unit (PDU) serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of sensitive data, including live pointers and GLib function addresses, which could defeat Address Space Layout Randomization (ASLR) and reveal the GLib module\u0027s base address.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91946"
},
{
"category": "external",
"summary": "RHBZ#2533913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91946"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91946",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91946"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea",
"url": "https://github.com/FreeRDP/FreeRDP/commit/483c9388119f06bac420d92053cff9ef94e83bea"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r7jx-j9h7-j4xj",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r7jx-j9h7-j4xj"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-information-disclosure-via-rdpgfx-resetgraphics",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-information-disclosure-via-rdpgfx-resetgraphics"
}
],
"release_date": "2026-09-15T15:18:05.104000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to FreeRDP server instances to only trusted clients and networks. Configure firewall rules to limit inbound connections to the RDP port (typically 3389) from untrusted sources. If FreeRDP server functionality is not required, consider disabling or uninstalling the FreeRDP server component.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Information Disclosure via RDPGFX ResetGraphics PDU"
},
{
"cve": "CVE-2026-91947",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-09-15T15:38:30.920995+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP server. This use-after-free vulnerability exists in the DRDYNVC parser, where a channel pointer is dereferenced after its synchronization lock has been released. An authenticated client can exploit this by racing AUDIN channel closure messages against DRDYNVC data parsing, leading to memory corruption. This could potentially result in arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91947"
},
{
"category": "external",
"summary": "RHBZ#2533942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91947"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6mpx-c8rj-whj5",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6mpx-c8rj-whj5"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-server-before-3.31.0-use-after-free-via-drdynvc",
"url": "https://www.vulncheck.com/advisories/freerdp-server-before-3.31.0-use-after-free-via-drdynvc"
}
],
"release_date": "2026-09-15T15:18:05.774000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "The vulnerability requires an authenticated client to interact with the FreeRDP server. To mitigate this issue, restrict network access to the FreeRDP server to only trusted clients and networks. If the FreeRDP server functionality is not required, consider disabling or uninstalling the FreeRDP server component to eliminate the attack surface.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Use-after-free vulnerability in DRDYNVC parser leads to memory corruption"
},
{
"cve": "CVE-2026-91950",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-15T15:40:11.181738+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533954"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP, where an out-of-bounds read vulnerability exists in the rdpdr_dump_packet function. This is due to a 32-bit unsigned integer wraparound during buffer bounds validation. A malicious RDP server can send a specially crafted RDPDR packet, bypassing security checks and causing the client to read memory beyond the intended buffer. This can result in client crashes, leading to a denial of service, or the disclosure of sensitive heap memory information in logs. Exploitation requires the client to have WLOG_TRACE-level logging enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91950"
},
{
"category": "external",
"summary": "RHBZ#2533954",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533954"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91950"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91950",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91950"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c5gr-hmqp-pwj4",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c5gr-hmqp-pwj4"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-out-of-bounds-read-via-uint32-wraparound",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-out-of-bounds-read-via-uint32-wraparound"
}
],
"release_date": "2026-09-15T15:18:07.841000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid connecting to untrusted or potentially malicious RDP servers. Restricting FreeRDP client connections to only known and trusted RDP servers significantly reduces the attack surface. If connecting to untrusted servers is unavoidable, consider using a highly isolated environment for the client.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service or information disclosure"
},
{
"cve": "CVE-2026-91953",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-09-15T15:38:53.949701+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A malicious RDP (Remote Desktop Protocol) server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU (Protocol Data Unit) with an oversized LB_LOAD_BALANCE_INFO field, an attacker could cause a denial of service or heap corruption on the client system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91953"
},
{
"category": "external",
"summary": "RHBZ#2533959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91953"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r9pv-ffph-6gg6",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r9pv-ffph-6gg6"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-heap-buffer-overflow-via-lb-load-balance-info",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-heap-buffer-overflow-via-lb-load-balance-info"
}
],
"release_date": "2026-09-15T15:18:09.893000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To prevent exploitation of this heap buffer overflow, FreeRDP clients should only be used to connect to trusted RDP servers. This operational control reduces the risk of encountering a malicious server redirection PDU.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption."
},
{
"cve": "CVE-2026-91954",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-09-15T15:33:21.355451+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533906"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can trigger a null pointer dereference in the `gdi_surface_bits` function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disabled in the client. Successful exploitation allows a remote attacker to cause a FreeRDP client to crash, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91954"
},
{
"category": "external",
"summary": "RHBZ#2533906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533906"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91954"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91954",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91954"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ffjr-p229-hpch",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ffjr-p229-hpch"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-null-pointer-dereference-via-nscodec",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-null-pointer-dereference-via-nscodec"
}
],
"release_date": "2026-09-15T15:18:10.550000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid connecting to untrusted or unknown RDP servers with FreeRDP clients. This vulnerability requires a FreeRDP client to connect to a malicious RDP server to be exploited.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command"
},
{
"cve": "CVE-2026-91956",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-15T15:37:28.975189+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can exploit an out-of-bounds read vulnerability in the URBDRC (USB device redirection) channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to a client crash and a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91956"
},
{
"category": "external",
"summary": "RHBZ#2533927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91956"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91956"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hg4r-vv53-vwf8",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hg4r-vv53-vwf8"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-out-of-bounds-read-via-urbdrc",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-out-of-bounds-read-via-urbdrc"
}
],
"release_date": "2026-09-15T15:18:11.941000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid connecting to untrusted or unverified RDP servers. Restricting FreeRDP client connections to known, trusted RDP servers can prevent exploitation of this vulnerability.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel"
},
{
"cve": "CVE-2026-91959",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-15T15:39:22.549708+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533951"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC (Remote Procedure Call) gateway transport parser by sending a malicious BIND_ACK Protocol Data Unit (PDU) with a truncated result entry. This can lead to a process abort, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91959"
},
{
"category": "external",
"summary": "RHBZ#2533951",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533951"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91959"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91959",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91959"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pj8w-fh79-f438",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pj8w-fh79-f438"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-buffer-over-read-via-rts-gateway",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-buffer-over-read-via-rts-gateway"
}
],
"release_date": "2026-09-15T15:18:13.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to any FreeRDP instance operating in a server or gateway role, limiting connections to trusted clients or networks. If FreeRDP is used as a client, avoid connecting to untrusted or malicious RDP servers to prevent exploitation.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway"
},
{
"cve": "CVE-2026-91960",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-09-15T15:39:31.098659+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the `Stream_EnsureRemainingCapacity` function, leading to an integer wraparound and a double free vulnerability. Successful exploitation results in a denial of service, causing the FreeRDP client to crash during connection.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91960"
},
{
"category": "external",
"summary": "RHBZ#2533957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91960"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91960",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91960"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vccg-35r5-8jrf",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vccg-35r5-8jrf"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-integer-overflow-double-free",
"url": "https://www.vulncheck.com/advisories/freerdp-before-3.31.0-integer-overflow-double-free"
}
],
"release_date": "2026-09-15T15:18:14.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To mitigate this issue, FreeRDP clients should only connect to trusted and verified Remote Desktop Gateway servers. Connecting to untrusted or unverified servers may expose the client to denial of service attacks.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR"
},
{
"cve": "CVE-2026-91963",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-09-15T15:37:40.378590+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533930"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol (RDP) server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This information disclosure can defeat Address Space Layout Randomization (ASLR), potentially enabling remote code execution when chained with other memory corruption vulnerabilities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91963"
},
{
"category": "external",
"summary": "RHBZ#2533930",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533930"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91963"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91963",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91963"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hw7p-5h2r-83gq",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hw7p-5h2r-83gq"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-through-3.30.0-uninitialized-heap-memory-disclosure-via-urbdrc",
"url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-through-3.30.0-uninitialized-heap-memory-disclosure-via-urbdrc"
}
],
"release_date": "2026-09-15T15:18:16.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "To reduce exposure, avoid connecting to untrusted RDP servers or disable the FreeRDP USB redirection channel if it is not required. When using the `xfreerdp` client, ensure that USB redirection is not enabled. This can be done by omitting the `/usb` or `/usb-redir` command-line options, or by explicitly disabling the `urbdrc` channel through FreeRDP configuration if available. Disabling this feature will prevent the redirection of USB devices to the remote session.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure"
},
{
"cve": "CVE-2026-91964",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-09-15T15:34:59.900108+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533911"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FreeRDP. A malicious Remote Desktop Protocol (RDP) server can exploit a heap-based buffer overflow vulnerability in the `nego_send_negotiation_request` function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled `LoadBalanceInfo` field, the server can write an arbitrary-length field into a fixed-size buffer without proper validation. This can lead to a denial of service (client crash) or, when chained with a memory disclosure vulnerability, potentially remote code execution on the client system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91964"
},
{
"category": "external",
"summary": "RHBZ#2533911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91964"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91964",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91964"
},
{
"category": "external",
"summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2vf2-grvj-6g8x",
"url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2vf2-grvj-6g8x"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-through-3.30.0-heap-buffer-overflow-via-routingtoken",
"url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-through-3.30.0-heap-buffer-overflow-via-routingtoken"
}
],
"release_date": "2026-09-15T15:18:17.388000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-05T05:19:49+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:75570"
},
{
"category": "workaround",
"details": "Users of FreeRDP clients should avoid connecting to untrusted or unknown RDP servers. This operational control reduces the risk of exploitation, as a malicious server is required to trigger the heap-based buffer overflow.",
"product_ids": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.src",
"AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.14.x86_64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.14.x86_64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.aarch64",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.ppc64le",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.s390x",
"CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…