SUSE-SU-2026:1633-1 - Vulnerability-Lookup

SUSE-SU-2026:1633-1

Vulnerability from csaf_suse - Published: 2026-04-27 12:05 - Updated: 2026-04-27 12:05

Summary

Security update for freerdp

Severity

Important

Notes

Title of the patch: Security update for freerdp

Description of the patch: This update for freerdp fixes the following issues: - CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted `WIRE_TO_SURFACE_2` PDU (bsc#1258919). - CVE-2026-25942: Global-buffer-overflow in `xf_rail_server_execute_result` (bsc#1258920). - CVE-2026-25952: Heap-use-after-free in `xf_SetWindowMinMaxInfo` (bsc#1258921). - CVE-2026-25953: Heap-use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258923). - CVE-2026-25954: Heap-use-after-free in `xf_rail_server_local_move_size` (bsc#1258924). - CVE-2026-25955: Heap-use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258973). - CVE-2026-25959: Heap-use-after-free in `xf_cliprdr_provide_data_` (bsc#1258976). - CVE-2026-25997: Heap-use-after-free in `xf_clipboard_format_equal` (bsc#1258977). - CVE-2026-26986: Heap-use-after-free in `rail_window_free` (bsc#1258967). - CVE-2026-27015: Smartcard NDR alignment padding triggers reachable `WINPR_ASSERT` abort (bsc#1258987). - CVE-2026-27950: Denial of service due to incomplete fix for heap-use-after-free vulnerability (bsc#1258941). - CVE-2026-27951: Denial of service via endless blocking loop in `Stream_EnsureCapacity` (bsc#1258939). - CVE-2026-29774: Missing bounds validation can cause a client-side heap buffer overflow (bsc#1259689). - CVE-2026-29775: Malicious server can trigger a client-side heap out-of-bounds access (bsc#1259684). - CVE-2026-29776: Missing length check can lead to an integer underflow (bsc#1259692). - CVE-2026-31897: Missing length check can cause an out-of-bounds read (bsc#1259693).

Patchnames: SUSE-2026-1633,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1633,SUSE-SLE-Product-WE-15-SP7-2026-1633

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2026-25941

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25942

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25952

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25953

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25954

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25955

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25959

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-25997

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-26986

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-27015

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-27950

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-27951

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-29774

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-29775

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-29776

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-31884

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2026-31897

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-updates/2026…	self
	https://bugzilla.suse.com/1258919	self
	https://bugzilla.suse.com/1258920	self
	https://bugzilla.suse.com/1258921	self
	https://bugzilla.suse.com/1258923	self
	https://bugzilla.suse.com/1258924	self
	https://bugzilla.suse.com/1258939	self
	https://bugzilla.suse.com/1258941	self
	https://bugzilla.suse.com/1258967	self
	https://bugzilla.suse.com/1258973	self
	https://bugzilla.suse.com/1258976	self
	https://bugzilla.suse.com/1258977	self
	https://bugzilla.suse.com/1258987	self
	https://bugzilla.suse.com/1259680	self
	https://bugzilla.suse.com/1259684	self
	https://bugzilla.suse.com/1259689	self
	https://bugzilla.suse.com/1259692	self
	https://bugzilla.suse.com/1259693	self
	https://www.suse.com/security/cve/CVE-2026-25941/	self
	https://www.suse.com/security/cve/CVE-2026-25942/	self
	https://www.suse.com/security/cve/CVE-2026-25952/	self
	https://www.suse.com/security/cve/CVE-2026-25953/	self
	https://www.suse.com/security/cve/CVE-2026-25954/	self
	https://www.suse.com/security/cve/CVE-2026-25955/	self
	https://www.suse.com/security/cve/CVE-2026-25959/	self
	https://www.suse.com/security/cve/CVE-2026-25997/	self
	https://www.suse.com/security/cve/CVE-2026-26986/	self
	https://www.suse.com/security/cve/CVE-2026-27015/	self
	https://www.suse.com/security/cve/CVE-2026-27950/	self
	https://www.suse.com/security/cve/CVE-2026-27951/	self
	https://www.suse.com/security/cve/CVE-2026-29774/	self
	https://www.suse.com/security/cve/CVE-2026-29775/	self
	https://www.suse.com/security/cve/CVE-2026-29776/	self
	https://www.suse.com/security/cve/CVE-2026-31884/	self
	https://www.suse.com/security/cve/CVE-2026-31897/	self
	https://www.suse.com/security/cve/CVE-2026-25941	external
	https://bugzilla.suse.com/1258919	external
	https://www.suse.com/security/cve/CVE-2026-25942	external
	https://bugzilla.suse.com/1258920	external
	https://www.suse.com/security/cve/CVE-2026-25952	external
	https://bugzilla.suse.com/1258921	external
	https://www.suse.com/security/cve/CVE-2026-25953	external
	https://bugzilla.suse.com/1258923	external
	https://www.suse.com/security/cve/CVE-2026-25954	external
	https://bugzilla.suse.com/1258924	external
	https://www.suse.com/security/cve/CVE-2026-25955	external
	https://bugzilla.suse.com/1258973	external
	https://www.suse.com/security/cve/CVE-2026-25959	external
	https://bugzilla.suse.com/1258976	external
	https://www.suse.com/security/cve/CVE-2026-25997	external
	https://bugzilla.suse.com/1258977	external
	https://www.suse.com/security/cve/CVE-2026-26986	external
	https://bugzilla.suse.com/1258967	external
	https://www.suse.com/security/cve/CVE-2026-27015	external
	https://bugzilla.suse.com/1258987	external
	https://www.suse.com/security/cve/CVE-2026-27950	external
	https://bugzilla.suse.com/1258941	external
	https://www.suse.com/security/cve/CVE-2026-27951	external
	https://bugzilla.suse.com/1258939	external
	https://www.suse.com/security/cve/CVE-2026-29774	external
	https://bugzilla.suse.com/1259689	external
	https://www.suse.com/security/cve/CVE-2026-29775	external
	https://bugzilla.suse.com/1259684	external
	https://www.suse.com/security/cve/CVE-2026-29776	external
	https://bugzilla.suse.com/1259692	external
	https://www.suse.com/security/cve/CVE-2026-31884	external
	https://bugzilla.suse.com/1259680	external
	https://www.suse.com/security/cve/CVE-2026-31897	external
	https://bugzilla.suse.com/1259693	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for freerdp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for freerdp fixes the following issues:\n\n- CVE-2026-25941: Out-of-Bounds Read in client RDPGFX channel via crafted `WIRE_TO_SURFACE_2` PDU (bsc#1258919).\n- CVE-2026-25942: Global-buffer-overflow in `xf_rail_server_execute_result` (bsc#1258920).\n- CVE-2026-25952: Heap-use-after-free in `xf_SetWindowMinMaxInfo` (bsc#1258921).\n- CVE-2026-25953: Heap-use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258923).\n- CVE-2026-25954: Heap-use-after-free in `xf_rail_server_local_move_size` (bsc#1258924).\n- CVE-2026-25955: Heap-use-after-free in `xf_AppUpdateWindowFromSurface` (bsc#1258973).\n- CVE-2026-25959: Heap-use-after-free in `xf_cliprdr_provide_data_` (bsc#1258976).\n- CVE-2026-25997: Heap-use-after-free in `xf_clipboard_format_equal` (bsc#1258977).\n- CVE-2026-26986: Heap-use-after-free in `rail_window_free` (bsc#1258967).\n- CVE-2026-27015: Smartcard NDR alignment padding triggers reachable `WINPR_ASSERT` abort (bsc#1258987).\n- CVE-2026-27950: Denial of service due to incomplete fix for heap-use-after-free vulnerability (bsc#1258941).\n- CVE-2026-27951: Denial of service via endless blocking loop in `Stream_EnsureCapacity` (bsc#1258939).\n- CVE-2026-29774: Missing bounds validation can cause a client-side heap buffer overflow (bsc#1259689).\n- CVE-2026-29775: Malicious server can trigger a client-side heap out-of-bounds access (bsc#1259684).\n- CVE-2026-29776: Missing length check can lead to an integer underflow (bsc#1259692).\n- CVE-2026-31897: Missing length check can cause an out-of-bounds read (bsc#1259693).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-1633,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1633,SUSE-SLE-Product-WE-15-SP7-2026-1633",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1633-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:1633-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261633-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:1633-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/046047.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258919",
        "url": "https://bugzilla.suse.com/1258919"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258920",
        "url": "https://bugzilla.suse.com/1258920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258921",
        "url": "https://bugzilla.suse.com/1258921"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258923",
        "url": "https://bugzilla.suse.com/1258923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258924",
        "url": "https://bugzilla.suse.com/1258924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258939",
        "url": "https://bugzilla.suse.com/1258939"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258941",
        "url": "https://bugzilla.suse.com/1258941"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258967",
        "url": "https://bugzilla.suse.com/1258967"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258973",
        "url": "https://bugzilla.suse.com/1258973"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258976",
        "url": "https://bugzilla.suse.com/1258976"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258977",
        "url": "https://bugzilla.suse.com/1258977"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258987",
        "url": "https://bugzilla.suse.com/1258987"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259680",
        "url": "https://bugzilla.suse.com/1259680"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259684",
        "url": "https://bugzilla.suse.com/1259684"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259689",
        "url": "https://bugzilla.suse.com/1259689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259692",
        "url": "https://bugzilla.suse.com/1259692"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259693",
        "url": "https://bugzilla.suse.com/1259693"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25941 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25941/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25942 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25952 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25952/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25953 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25954 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25955 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25955/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25959 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25959/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-26986 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-26986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27950 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27951 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27951/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29774 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29775 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29776 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31884 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31897 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31897/"
      }
    ],
    "title": "Security update for freerdp",
    "tracking": {
      "current_release_date": "2026-04-27T12:05:30Z",
      "generator": {
        "date": "2026-04-27T12:05:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:1633-1",
      "initial_release_date": "2026-04-27T12:05:30Z",
      "revision_history": [
        {
          "date": "2026-04-27T12:05:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-devel-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-devel-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-proxy-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-sdl-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-sdl-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-sdl-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-server-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-server-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "freerdp-wayland-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp3-3-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "libfreerdp3-3-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "libfreerdp3-3-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "librdtk0-0-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "librdtk0-0-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "librdtk0-0-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libuwac0-0-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "libuwac0-0-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "libuwac0-0-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr3-3-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "libwinpr3-3-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "libwinpr3-3-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rdtk0-devel-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "rdtk0-devel-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "rdtk0-devel-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "uwac0-devel-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "uwac0-devel-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "uwac0-devel-3.10.3-150700.3.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "winpr-devel-3.10.3-150700.3.14.1.aarch64",
                "product": {
                  "name": "winpr-devel-3.10.3-150700.3.14.1.aarch64",
                  "product_id": "winpr-devel-3.10.3-150700.3.14.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-devel-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-devel-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-proxy-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-proxy-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-sdl-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-sdl-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-sdl-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-server-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-server-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-wayland-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "freerdp-wayland-3.10.3-150700.3.14.1.i586",
                  "product_id": "freerdp-wayland-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.i586",
                  "product_id": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp3-3-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "libfreerdp3-3-3.10.3-150700.3.14.1.i586",
                  "product_id": "libfreerdp3-3-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "librdtk0-0-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "librdtk0-0-3.10.3-150700.3.14.1.i586",
                  "product_id": "librdtk0-0-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libuwac0-0-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "libuwac0-0-3.10.3-150700.3.14.1.i586",
                  "product_id": "libuwac0-0-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr3-3-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "libwinpr3-3-3.10.3-150700.3.14.1.i586",
                  "product_id": "libwinpr3-3-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "rdtk0-devel-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "rdtk0-devel-3.10.3-150700.3.14.1.i586",
                  "product_id": "rdtk0-devel-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "uwac0-devel-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "uwac0-devel-3.10.3-150700.3.14.1.i586",
                  "product_id": "uwac0-devel-3.10.3-150700.3.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "winpr-devel-3.10.3-150700.3.14.1.i586",
                "product": {
                  "name": "winpr-devel-3.10.3-150700.3.14.1.i586",
                  "product_id": "winpr-devel-3.10.3-150700.3.14.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-devel-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-proxy-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-sdl-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-sdl-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-sdl-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-server-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-server-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "freerdp-wayland-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp3-3-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "libfreerdp3-3-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "libfreerdp3-3-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "librdtk0-0-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "librdtk0-0-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "librdtk0-0-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "libuwac0-0-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr3-3-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "libwinpr3-3-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "libwinpr3-3-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "rdtk0-devel-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "rdtk0-devel-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "rdtk0-devel-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "uwac0-devel-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "uwac0-devel-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "uwac0-devel-3.10.3-150700.3.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "winpr-devel-3.10.3-150700.3.14.1.ppc64le",
                "product": {
                  "name": "winpr-devel-3.10.3-150700.3.14.1.ppc64le",
                  "product_id": "winpr-devel-3.10.3-150700.3.14.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-devel-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-devel-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-proxy-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-proxy-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-sdl-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-sdl-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-sdl-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-server-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-server-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-wayland-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "freerdp-wayland-3.10.3-150700.3.14.1.s390x",
                  "product_id": "freerdp-wayland-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.s390x",
                  "product_id": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp3-3-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "libfreerdp3-3-3.10.3-150700.3.14.1.s390x",
                  "product_id": "libfreerdp3-3-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "librdtk0-0-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "librdtk0-0-3.10.3-150700.3.14.1.s390x",
                  "product_id": "librdtk0-0-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libuwac0-0-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "libuwac0-0-3.10.3-150700.3.14.1.s390x",
                  "product_id": "libuwac0-0-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr3-3-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "libwinpr3-3-3.10.3-150700.3.14.1.s390x",
                  "product_id": "libwinpr3-3-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "rdtk0-devel-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "rdtk0-devel-3.10.3-150700.3.14.1.s390x",
                  "product_id": "rdtk0-devel-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "uwac0-devel-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "uwac0-devel-3.10.3-150700.3.14.1.s390x",
                  "product_id": "uwac0-devel-3.10.3-150700.3.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "winpr-devel-3.10.3-150700.3.14.1.s390x",
                "product": {
                  "name": "winpr-devel-3.10.3-150700.3.14.1.s390x",
                  "product_id": "winpr-devel-3.10.3-150700.3.14.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-devel-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-devel-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-proxy-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-sdl-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-server-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-server-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-wayland-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "freerdp-wayland-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "freerdp-wayland-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "libfreerdp3-3-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "librdtk0-0-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "librdtk0-0-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "librdtk0-0-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libuwac0-0-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "libuwac0-0-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "libuwac0-0-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "libwinpr3-3-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rdtk0-devel-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "rdtk0-devel-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "rdtk0-devel-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "uwac0-devel-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "uwac0-devel-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "uwac0-devel-3.10.3-150700.3.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "winpr-devel-3.10.3-150700.3.14.1.x86_64",
                "product": {
                  "name": "winpr-devel-3.10.3-150700.3.14.1.x86_64",
                  "product_id": "winpr-devel-3.10.3-150700.3.14.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "freerdp-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "freerdp-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "freerdp-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "freerdp-devel-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "freerdp-devel-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-proxy-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-proxy-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-proxy-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "freerdp-proxy-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "freerdp-server-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "freerdp-server-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "freerdp-server-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-wayland-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-wayland-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-wayland-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "freerdp-wayland-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuwac0-0-3.10.3-150700.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64"
        },
        "product_reference": "libuwac0-0-3.10.3-150700.3.14.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuwac0-0-3.10.3-150700.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le"
        },
        "product_reference": "libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libuwac0-0-3.10.3-150700.3.14.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x"
        },
        "product_reference": "libuwac0-0-3.10.3-150700.3.14.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-devel-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-proxy-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-sdl-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "freerdp-server-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreerdp3-3-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "librdtk0-0-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "librdtk0-0-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr3-3-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "winpr-devel-3.10.3-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        },
        "product_reference": "winpr-devel-3.10.3-150700.3.14.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25941",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25941"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client\u0027s RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25941",
          "url": "https://www.suse.com/security/cve/CVE-2026-25941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258919 for CVE-2026-25941",
          "url": "https://bugzilla.suse.com/1258919"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25941"
    },
    {
      "cve": "CVE-2026-25942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0-6) with an unchecked `execResult-\u003eexecResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25942",
          "url": "https://www.suse.com/security/cve/CVE-2026-25942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258920 for CVE-2026-25942",
          "url": "https://bugzilla.suse.com/1258920"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25942"
    },
    {
      "cve": "CVE-2026-25952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25952",
          "url": "https://www.suse.com/security/cve/CVE-2026-25952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258921 for CVE-2026-25952",
          "url": "https://bugzilla.suse.com/1258921"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25952"
    },
    {
      "cve": "CVE-2026-25953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer via `xf_rail_get_window` without any lifetime protection, while the main thread can concurrently delete the window through a fastpath window-delete order. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25953",
          "url": "https://www.suse.com/security/cve/CVE-2026-25953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258923 for CVE-2026-25953",
          "url": "https://bugzilla.suse.com/1258923"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25953"
    },
    {
      "cve": "CVE-2026-25954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25954",
          "url": "https://www.suse.com/security/cve/CVE-2026-25954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258924 for CVE-2026-25954",
          "url": "https://bugzilla.suse.com/1258924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25954"
    },
    {
      "cve": "CVE-2026-25955",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25955"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer, because `gdi_DeleteSurface` frees `surface-\u003edata` without invalidating the `appWindow-\u003eimage` that aliases it. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25955",
          "url": "https://www.suse.com/security/cve/CVE-2026-25955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258973 for CVE-2026-25955",
          "url": "https://bugzilla.suse.com/1258973"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25955"
    },
    {
      "cve": "CVE-2026-25959",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25959"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread calls `xf_cliprdr_server_format_data_response` which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls `xf_cliprdr_clear_cached_data` -\u003e `HashTable_Clear` which frees the same data via `xf_cached_data_free`, triggering a heap use after free. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25959",
          "url": "https://www.suse.com/security/cve/CVE-2026-25959"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258976 for CVE-2026-25959",
          "url": "https://bugzilla.suse.com/1258976"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25959"
    },
    {
      "cve": "CVE-2026-25997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread during auto-reconnect) frees the array while the X11 event thread concurrently iterates it in `xf_clipboard_changed`, triggering a heap use after free. Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25997",
          "url": "https://www.suse.com/security/cve/CVE-2026-25997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258977 for CVE-2026-25997",
          "url": "https://bugzilla.suse.com/1258977"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25997"
    },
    {
      "cve": "CVE-2026-26986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-26986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-26986",
          "url": "https://www.suse.com/security/cve/CVE-2026-26986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258967 for CVE-2026-26986",
          "url": "https://bugzilla.suse.com/1258967"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-26986"
    },
    {
      "cve": "CVE-2026-27015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to crash the FreeRDP client via a reachable `WINPR_ASSERT` -\u003e `abort()`. The crash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON` (default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard redirection must be explicitly enabled by the user (e.g., `xfreerdp /smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27015",
          "url": "https://www.suse.com/security/cve/CVE-2026-27015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258987 for CVE-2026-27015",
          "url": "https://bugzilla.suse.com/1258987"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27015"
    },
    {
      "cve": "CVE-2026-27950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27950",
          "url": "https://www.suse.com/security/cve/CVE-2026-27950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258941 for CVE-2026-27950",
          "url": "https://bugzilla.suse.com/1258941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27950"
    },
    {
      "cve": "CVE-2026-27951",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27951"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `\u003e= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27951",
          "url": "https://www.suse.com/security/cve/CVE-2026-27951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258939 for CVE-2026-27951",
          "url": "https://bugzilla.suse.com/1258939"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27951"
    },
    {
      "cve": "CVE-2026-29774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client\u0027s AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal bounds validation of H.264 metablock regionRects coordinates.  In yuv.c, the clamp() function (line 347) only validates top/bottom against the surface/YUV height, but never checks left/right against the surface width. When avc420_yuv_to_rgb (line 67) computes destination and source pointers using rect-\u003eleft, it performs unchecked pointer arithmetic that can reach far beyond the allocated surface buffer. A malicious server sends a WIRE_TO_SURFACE_PDU_1 with AVC420 codec containing a regionRects entry where left greatly exceeds the surface width (e.g., left=60000 on a 128px surface). The H.264 bitstream decodes successfully, then yuv420_process_work_callback calls avc420_yuv_to_rgb which computes pDstPoint = pDstData + rect-\u003etop * nDstStep + rect-\u003eleft * 4, writing 16-byte SSE vectors 1888+ bytes past the allocated heap region. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29774",
          "url": "https://www.suse.com/security/cve/CVE-2026-29774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259689 for CVE-2026-29774",
          "url": "https://bugzilla.suse.com/1259689"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-29774"
    },
    {
      "cve": "CVE-2026-29775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP\u0027s bitmap cache subsystem due to an off-by-one boundary check in bitmap_cache_put. A malicious server can send a CACHE_BITMAP_ORDER (Rev1) with cacheId equal to maxCells, bypassing the guard and accessing cells[] one element past the allocated array. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29775",
          "url": "https://www.suse.com/security/cve/CVE-2026-29775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259684 for CVE-2026-29775",
          "url": "https://bugzilla.suse.com/1259684"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-29775"
    },
    {
      "cve": "CVE-2026-29776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP\u0027s Core Library This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29776",
          "url": "https://www.suse.com/security/cve/CVE-2026-29776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259692 for CVE-2026-29776",
          "url": "https://bugzilla.suse.com/1259692"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-29776"
    },
    {
      "cve": "CVE-2026-31884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In libfreerdp/codec/dsp.c, both ADPCM decoders use size % block_size where block_size = context-\u003ecommon.format.nBlockAlign. The nBlockAlign value comes from the Server Audio Formats PDU on the RDPSND channel. The value 0 is not validated anywhere before reaching the decoder. When nBlockAlign = 0, the modulo operation causes a SIGFPE (floating point exception) crash. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31884",
          "url": "https://www.suse.com/security/cve/CVE-2026-31884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259680 for CVE-2026-31884",
          "url": "https://bugzilla.suse.com/1259680"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31884"
    },
    {
      "cve": "CVE-2026-31897",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31897"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0. The function dereferences *srcp (which points to pSrcData) without first verifying that SrcSize \u003e= 1. When SrcSize is 0 and pSrcData is non-NULL, this reads one byte past the end of the source buffer. This vulnerability is fixed in 3.24.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31897",
          "url": "https://www.suse.com/security/cve/CVE-2026-31897"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259693 for CVE-2026-31897",
          "url": "https://bugzilla.suse.com/1259693"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.14.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.14.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.14.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-27T12:05:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-31897"
    }
  ]
}

CVE-2026-26986 (GCVE-0-2026-26986)

Vulnerability from cvelistv5 – Published: 2026-02-25 21:01 – Updated: 2026-02-26 20:36

Title

FreeRDP has heap-use-after-free in rail_window_free

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/b4f0f0a…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-26986",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T20:35:52.339851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T20:36:03.263Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T21:01:16.916Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-crqx-g6x5-rx47",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-crqx-g6x5-rx47"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/b4f0f0a18fe53aa8d47d062f91471f4e9c5e0d51",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/b4f0f0a18fe53aa8d47d062f91471f4e9c5e0d51"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1297",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1297"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1316-L1327",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1316-L1327"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L386-L394",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L386-L394"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L395-L399",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L395-L399"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L401-L404",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L401-L404"
        }
      ],
      "source": {
        "advisory": "GHSA-crqx-g6x5-rx47",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in rail_window_free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-26986",
    "datePublished": "2026-02-25T21:01:16.916Z",
    "dateReserved": "2026-02-17T01:41:24.606Z",
    "dateUpdated": "2026-02-26T20:36:03.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31897 (GCVE-0-2026-31897)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:42 – Updated: 2026-03-13 18:10

Title

FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0. The function dereferences *srcp (which points to pSrcData) without first verifying that SrcSize >= 1. When SrcSize is 0 and pSrcData is non-NULL, this reads one byte past the end of the source buffer. This vulnerability is fixed in 3.24.0.

Severity ?

0 (None)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/cd27c8f…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.24.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-31897",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-13T18:09:57.983306Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-13T18:10:06.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0. The function dereferences *srcp (which points to pSrcData) without first verifying that SrcSize \u003e= 1. When SrcSize is 0 and pSrcData is non-NULL, this reads one byte past the end of the source buffer. This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:42:11.932Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xgv6-r22m-7c9x",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xgv6-r22m-7c9x"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/cd27c8faca0eeb0d4309cc5837dfdf3c42eba4e7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/cd27c8faca0eeb0d4309cc5837dfdf3c42eba4e7"
        }
      ],
      "source": {
        "advisory": "GHSA-xgv6-r22m-7c9x",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-31897",
    "datePublished": "2026-03-13T17:42:11.932Z",
    "dateReserved": "2026-03-09T21:59:02.689Z",
    "dateUpdated": "2026-03-13T18:10:06.909Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25952 (GCVE-0-2026-25952)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:24 – Updated: 2026-02-26 15:56

Title

FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/1994e98…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25952",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:56:18.815872Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:56:24.771Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqm-cwjg-7w9x"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:24:07.396Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqm-cwjg-7w9x",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cgqm-cwjg-7w9x"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1167",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1167"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1174",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1174"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1178",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1178"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1111",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1111"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1128",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1128"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1428",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1428"
        }
      ],
      "source": {
        "advisory": "GHSA-cgqm-cwjg-7w9x",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_SetWindowMinMaxInfo"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25952",
    "datePublished": "2026-02-25T20:24:07.396Z",
    "dateReserved": "2026-02-09T17:13:54.065Z",
    "dateUpdated": "2026-02-26T15:56:24.771Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25955 (GCVE-0-2026-25955)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:32 – Updated: 2026-02-26 15:54

Title

FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer, because `gdi_DeleteSurface` frees `surface->data` without invalidating the `appWindow->image` that aliases it. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/169d358…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25955",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:54:03.703745Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:54:09.229Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reuses a cached `XImage` whose `data` pointer references a freed RDPGFX surface buffer, because `gdi_DeleteSurface` frees `surface-\u003edata` without invalidating the `appWindow-\u003eimage` that aliases it. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:32:42.458Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4g54-x8v7-559x"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/169d358734509e82663a0d6a0085ae726d439d8e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/169d358734509e82663a0d6a0085ae726d439d8e"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1492",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1492"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1494-L1500",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1494-L1500"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1528",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1528"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L1224-L1227",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L1224-L1227"
        }
      ],
      "source": {
        "advisory": "GHSA-4g54-x8v7-559x",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (stale XImage)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25955",
    "datePublished": "2026-02-25T20:32:42.458Z",
    "dateReserved": "2026-02-09T17:13:54.065Z",
    "dateUpdated": "2026-02-26T15:54:09.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29776 (GCVE-0-2026-29776)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:33 – Updated: 2026-03-16 17:03

Title

FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

Severity ?

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE

CWE-190 - Integer Overflow or Wraparound
CWE-191 - Integer Underflow (Wrap or Wraparound)
CWE-400 - Uncontrolled Resource Consumption
CWE-789 - Memory Allocation with Excessive Size Value

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/a9e0abf…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.24.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29776",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T17:03:32.783086Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T17:03:39.238Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP\u0027s Core Library This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "CWE-789: Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:33:10.360Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a"
        }
      ],
      "source": {
        "advisory": "GHSA-c747-x4wf-cqrr",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP\u0027s Core Library"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-29776",
    "datePublished": "2026-03-13T17:33:10.360Z",
    "dateReserved": "2026-03-04T16:26:02.898Z",
    "dateUpdated": "2026-03-16T17:03:39.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27950 (GCVE-0-2026-27950)

Vulnerability from cvelistv5 – Published: 2026-02-25 21:05 – Updated: 2026-02-26 20:38

Title

FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/5f62aa1…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/commit/c42ecbd…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/master/cl…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-27950",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T20:37:16.691890Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T20:38:07.068Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T21:05:23.581Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rvfg-86cr-5r6p",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rvfg-86cr-5r6p"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/5f62aa11c1bdf00f94c40ea9ebb260a752740b80",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/5f62aa11c1bdf00f94c40ea9ebb260a752740b80"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/c42ecbd183b001e76bfc3614cddfad0034acc758",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/c42ecbd183b001e76bfc3614cddfad0034acc758"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/master/client/SDL/SDL2/sdl_pointer.cpp#L63-L64",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/master/client/SDL/SDL2/sdl_pointer.cpp#L63-L64"
        }
      ],
      "source": {
        "advisory": "GHSA-rvfg-86cr-5r6p",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-27950",
    "datePublished": "2026-02-25T21:05:23.581Z",
    "dateReserved": "2026-02-25T03:11:36.690Z",
    "dateUpdated": "2026-02-26T20:38:07.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29774 (GCVE-0-2026-29774)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:26 – Updated: 2026-03-16 17:05

Title

FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal bounds validation of H.264 metablock regionRects coordinates. In yuv.c, the clamp() function (line 347) only validates top/bottom against the surface/YUV height, but never checks left/right against the surface width. When avc420_yuv_to_rgb (line 67) computes destination and source pointers using rect->left, it performs unchecked pointer arithmetic that can reach far beyond the allocated surface buffer. A malicious server sends a WIRE_TO_SURFACE_PDU_1 with AVC420 codec containing a regionRects entry where left greatly exceeds the surface width (e.g., left=60000 on a 128px surface). The H.264 bitstream decodes successfully, then yuv420_process_work_callback calls avc420_yuv_to_rgb which computes pDstPoint = pDstData + rect->top * nDstStep + rect->left * 4, writing 16-byte SSE vectors 1888+ bytes past the allocated heap region. This vulnerability is fixed in 3.24.0.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-787 - Out-of-bounds Write

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/6482b7a…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.24.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29774",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T17:04:57.793786Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T17:05:01.346Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5q35-hv9x-7794"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client\u0027s AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal bounds validation of H.264 metablock regionRects coordinates.  In yuv.c, the clamp() function (line 347) only validates top/bottom against the surface/YUV height, but never checks left/right against the surface width. When avc420_yuv_to_rgb (line 67) computes destination and source pointers using rect-\u003eleft, it performs unchecked pointer arithmetic that can reach far beyond the allocated surface buffer. A malicious server sends a WIRE_TO_SURFACE_PDU_1 with AVC420 codec containing a regionRects entry where left greatly exceeds the surface width (e.g., left=60000 on a 128px surface). The H.264 bitstream decodes successfully, then yuv420_process_work_callback calls avc420_yuv_to_rgb which computes pDstPoint = pDstData + rect-\u003etop * nDstStep + rect-\u003eleft * 4, writing 16-byte SSE vectors 1888+ bytes past the allocated heap region. This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:26:58.208Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5q35-hv9x-7794",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5q35-hv9x-7794"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/6482b7a92fff3959582cef052d1967ad6bde3738",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/6482b7a92fff3959582cef052d1967ad6bde3738"
        }
      ],
      "source": {
        "advisory": "GHSA-5q35-hv9x-7794",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has a heap-buffer-overflow in avc420_yuv_to_rgb via OOB regionRects"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-29774",
    "datePublished": "2026-03-13T17:26:58.208Z",
    "dateReserved": "2026-03-04T16:26:02.897Z",
    "dateUpdated": "2026-03-16T17:05:01.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25953 (GCVE-0-2026-25953)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:27 – Updated: 2026-02-26 15:55

Title

FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer via `xf_rail_get_window` without any lifetime protection, while the main thread can concurrently delete the window through a fastpath window-delete order. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/1994e98…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25953",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:55:29.883632Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:55:34.086Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6rq-rxpc-rh3p"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface` reads from a freed `xfAppWindow` because the RDPGFX DVC thread obtains a bare pointer via `xf_rail_get_window` without any lifetime protection, while the main thread can concurrently delete the window through a fastpath window-delete order. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:27:00.424Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6rq-rxpc-rh3p",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6rq-rxpc-rh3p"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1237",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1237"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L257-L290",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L257-L290"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643-L647",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L643-L647"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394-L1428",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1394-L1428"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1462-L1470",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1462-L1470"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1491",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_window.c#L1484-L1491"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L254-L286",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L254-L286"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L278-L279",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/libfreerdp/gdi/gfx.c#L278-L279"
        }
      ],
      "source": {
        "advisory": "GHSA-p6rq-rxpc-rh3p",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_AppUpdateWindowFromSurface (freed appWindow)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25953",
    "datePublished": "2026-02-25T20:27:00.424Z",
    "dateReserved": "2026-02-09T17:13:54.065Z",
    "dateUpdated": "2026-02-26T15:55:34.086Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-31884 (GCVE-0-2026-31884)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:36 – Updated: 2026-03-16 15:33

Title

FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In libfreerdp/codec/dsp.c, both ADPCM decoders use size % block_size where block_size = context->common.format.nBlockAlign. The nBlockAlign value comes from the Server Audio Formats PDU on the RDPSND channel. The value 0 is not validated anywhere before reaching the decoder. When nBlockAlign = 0, the modulo operation causes a SIGFPE (floating point exception) crash. This vulnerability is fixed in 3.24.0.

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-369 - Divide By Zero

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/03b48b3…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/commit/16df230…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.24.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-31884",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T15:33:39.561333Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T15:33:42.352Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jp7m-94ww-p56r"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-ADPCM decoders when nBlockAlign is 0, leading to a crash. In libfreerdp/codec/dsp.c, both ADPCM decoders use size % block_size where block_size = context-\u003ecommon.format.nBlockAlign. The nBlockAlign value comes from the Server Audio Formats PDU on the RDPSND channel. The value 0 is not validated anywhere before reaching the decoder. When nBlockAlign = 0, the modulo operation causes a SIGFPE (floating point exception) crash. This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-369",
              "description": "CWE-369: Divide By Zero",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:36:57.722Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jp7m-94ww-p56r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jp7m-94ww-p56r"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/03b48b3601d867afccac1cdc6081de7a275edce7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/03b48b3601d867afccac1cdc6081de7a275edce7"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/16df2300e1e3f5a51f68fb1626429e58b531b7c8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/16df2300e1e3f5a51f68fb1626429e58b531b7c8"
        }
      ],
      "source": {
        "advisory": "GHSA-jp7m-94ww-p56r",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-31884",
    "datePublished": "2026-03-13T17:36:57.722Z",
    "dateReserved": "2026-03-09T21:59:02.686Z",
    "dateUpdated": "2026-03-16T15:33:42.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25954 (GCVE-0-2026-25954)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:30 – Updated: 2026-02-26 15:54

Title

FreeRDP has heap-use-after-free in xf_rail_server_local_move_size

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/1994e98…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25954",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:54:42.892183Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:54:47.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_size` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:30:32.755Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cc88-4j37-mw6j"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/1994e9844212a6dfe0ff12309fef520e888986b5"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1076",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1076"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1133",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1133"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1230-L1238"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1347",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1347"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1350-L1359",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L1350-L1359"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L647",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_rail.c#L647"
        }
      ],
      "source": {
        "advisory": "GHSA-cc88-4j37-mw6j",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_rail_server_local_move_size"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25954",
    "datePublished": "2026-02-25T20:30:32.755Z",
    "dateReserved": "2026-02-09T17:13:54.065Z",
    "dateUpdated": "2026-02-26T15:54:47.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27015 (GCVE-0-2026-27015)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:44 – Updated: 2026-02-26 15:49

Title

FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to crash the FreeRDP client via a reachable `WINPR_ASSERT` → `abort()`. The crash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON` (default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard redirection must be explicitly enabled by the user (e.g., `xfreerdp /smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes the issue.

Severity ?

5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P

CWE

CWE-617 - Reachable Assertion

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/65d59d3…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-27015",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:49:47.419476Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:49:52.553Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `smartcard_unpack_read_size_align()` (`libfreerdp/utils/smartcard_pack.c:1703`) allows a malicious RDP server to crash the FreeRDP client via a reachable `WINPR_ASSERT` \u2192 `abort()`. The crash occurs in upstream builds where `WITH_VERBOSE_WINPR_ASSERT=ON` (default in FreeRDP 3.22.0 / current WinPR CMake defaults). Smartcard redirection must be explicitly enabled by the user (e.g., `xfreerdp /smartcard`; `/smartcard-logon` implies `/smartcard`). Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "CWE-617: Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:45:52.846Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7g72-39pq-4725"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/65d59d3b3c2f630f2ea862687ecf5f95f8115244",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/65d59d3b3c2f630f2ea862687ecf5f95f8115244"
        }
      ],
      "source": {
        "advisory": "GHSA-7g72-39pq-4725",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-27015",
    "datePublished": "2026-02-25T20:44:14.152Z",
    "dateReserved": "2026-02-17T03:08:23.490Z",
    "dateUpdated": "2026-02-26T15:49:52.553Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27951 (GCVE-0-2026-27951)

Vulnerability from cvelistv5 – Published: 2026-02-25 21:07 – Updated: 2026-02-25 21:43

Title

FreeRDP has possible Integer overflow in Stream_EnsureCapacity

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `>= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/118afc0…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-27951",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-25T21:43:45.822440Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T21:43:56.822Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `\u003e= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T21:07:30.828Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113"
        }
      ],
      "source": {
        "advisory": "GHSA-qcfc-ghxr-h927",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has possible Integer overflow in Stream_EnsureCapacity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-27951",
    "datePublished": "2026-02-25T21:07:30.828Z",
    "dateReserved": "2026-02-25T03:11:36.690Z",
    "dateUpdated": "2026-02-25T21:43:56.822Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29775 (GCVE-0-2026-29775)

Vulnerability from cvelistv5 – Published: 2026-03-13 17:28 – Updated: 2026-03-16 17:04

Title

FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP's bitmap cache subsystem due to an off-by-one boundary check in bitmap_cache_put. A malicious server can send a CACHE_BITMAP_ORDER (Rev1) with cacheId equal to maxCells, bypassing the guard and accessing cells[] one element past the allocated array. This vulnerability is fixed in 3.24.0.

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-787 - Out-of-bounds Write

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/ffad58f…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.24.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29775",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T17:04:13.591162Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T17:04:16.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h666-rfw3-jhvj"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.24.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/write occurs in FreeRDP\u0027s bitmap cache subsystem due to an off-by-one boundary check in bitmap_cache_put. A malicious server can send a CACHE_BITMAP_ORDER (Rev1) with cacheId equal to maxCells, bypassing the guard and accessing cells[] one element past the allocated array. This vulnerability is fixed in 3.24.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-13T17:28:39.641Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h666-rfw3-jhvj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h666-rfw3-jhvj"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/ffad58fd2b329efd81a3239e9d7e3c927b8e503f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/ffad58fd2b329efd81a3239e9d7e3c927b8e503f"
        }
      ],
      "source": {
        "advisory": "GHSA-h666-rfw3-jhvj",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-29775",
    "datePublished": "2026-03-13T17:28:39.641Z",
    "dateReserved": "2026-03-04T16:26:02.897Z",
    "dateUpdated": "2026-03-16T17:04:16.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25942 (GCVE-0-2026-25942)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:01 – Updated: 2026-02-26 20:47

Title

FreeRDP has global-buffer-overflow in xf_rail_server_execute_result

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0–6) with an unchecked `execResult->execResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/9362a0b…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/3370e30e9…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/3370e30e9…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/3370e30e9…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/3370e30e9…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25942",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T20:46:57.440011Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T20:47:09.779Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0\u20136) with an unchecked `execResult-\u003eexecResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:01:16.472Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78q6-67m7-wwf6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78q6-67m7-wwf6"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/9362a0bf8dda04eedbca07d5dfaec1044e67cc6b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/9362a0bf8dda04eedbca07d5dfaec1044e67cc6b"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L528",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L528"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L75-L76",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.c#L75-L76"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L1014-L1017",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L1014-L1017"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L40-L46",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.c#L40-L46"
        }
      ],
      "source": {
        "advisory": "GHSA-78q6-67m7-wwf6",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has global-buffer-overflow in xf_rail_server_execute_result"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25942",
    "datePublished": "2026-02-25T20:01:16.472Z",
    "dateReserved": "2026-02-09T16:22:17.787Z",
    "dateUpdated": "2026-02-26T20:47:09.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25959 (GCVE-0-2026-25959)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:36 – Updated: 2026-02-26 15:52

Title

FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread calls `xf_cliprdr_server_format_data_response` which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls `xf_cliprdr_clear_cached_data` → `HashTable_Clear` which frees the same data via `xf_cached_data_free`, triggering a heap use after free. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/d3e8b3b…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25959",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T15:52:18.292869Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:52:24.977Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` passes freed `pDstData` to `XChangeProperty` because the cliprdr channel thread calls `xf_cliprdr_server_format_data_response` which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls `xf_cliprdr_clear_cached_data` \u2192 `HashTable_Clear` which frees the same data via `xf_cached_data_free`, triggering a heap use after free. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:36:09.791Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78xg-v4p2-4w3c"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/d3e8b3b9365be96a4f11dda149d71b3287227d0a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/d3e8b3b9365be96a4f11dda149d71b3287227d0a"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1229-L1243",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1229-L1243"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1337-L1344",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1337-L1344"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L200-L208",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L200-L208"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2295",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2295"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2323-L2334",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2323-L2334"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2363",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L2363"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L933",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L933"
        }
      ],
      "source": {
        "advisory": "GHSA-78xg-v4p2-4w3c",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25959",
    "datePublished": "2026-02-25T20:36:09.791Z",
    "dateReserved": "2026-02-09T17:13:54.066Z",
    "dateUpdated": "2026-02-26T15:52:24.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25997 (GCVE-0-2026-25997)

Vulnerability from cvelistv5 – Published: 2026-02-25 20:38 – Updated: 2026-02-25 21:39

Title

FreeRDP has heap-use-after-free in xf_clipboard_format_equal

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread during auto-reconnect) frees the array while the X11 event thread concurrently iterates it in `xf_clipboard_changed`, triggering a heap use after free. Version 3.23.0 fixes the issue.

Severity ?

5.5 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/5840940…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC
	https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25997",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-25T21:38:45.918498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T21:39:08.071Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` reads freed `lastSentFormats` memory because `xf_clipboard_formats_free` (called from the cliprdr channel thread during auto-reconnect) frees the array while the X11 event thread concurrently iterates it in `xf_clipboard_changed`, triggering a heap use after free. Version 3.23.0 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T20:38:40.483Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5j3-m6jf-3jq4"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/58409406afe7c2a8a71ed2dc8e22075be4f41c0c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/58409406afe7c2a8a71ed2dc8e22075be4f41c0c"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1884",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1884"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1889",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L1889"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L265",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L265"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L616",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L616"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L831",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L831"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L851-L855",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L851-L855"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L868-L875",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/blob/5c7aae27d0417b42b4806c2a5c583ca39dd9ef1e/client/X11/xf_cliprdr.c#L868-L875"
        }
      ],
      "source": {
        "advisory": "GHSA-q5j3-m6jf-3jq4",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP has heap-use-after-free in xf_clipboard_format_equal"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25997",
    "datePublished": "2026-02-25T20:38:40.483Z",
    "dateReserved": "2026-02-09T17:41:55.859Z",
    "dateUpdated": "2026-02-25T21:39:08.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25941 (GCVE-0-2026-25941)

Vulnerability from cvelistv5 – Published: 2026-02-25 19:55 – Updated: 2026-02-26 21:33

Title

FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read

Summary

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client's RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

CWE-20 - Improper Input Validation
CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

URL

Tags

	https://github.com/FreeRDP/FreeRDP/security/advis…	x_refsource_CONFIRM
	https://github.com/FreeRDP/FreeRDP/commit/2e3b77e…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	FreeRDP	FreeRDP	Affected: >= 2.0.0, < 2.11.8 Affected: >= 3.0.0, < 3.23.0

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25941",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-26T21:07:27.951810Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T21:33:42.006Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FreeRDP",
          "vendor": "FreeRDP",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.11.8"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.23.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on the 3.x branch prior to 3.23.0 have an out-of-bounds read vulnerability in the FreeRDP client\u0027s RDPGFX channel that allows a malicious RDP server to read uninitialized heap memory by sending a crafted WIRE_TO_SURFACE_2 PDU with a `bitmapDataLength` value larger than the actual data in the packet. This can lead to information disclosure or client crashes when a user connects to a malicious server. Versions 2.11.8 and 3.23.0 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-25T19:55:24.984Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3546-x645-5cf8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3546-x645-5cf8"
        },
        {
          "name": "https://github.com/FreeRDP/FreeRDP/commit/2e3b77e28ac6a398897d28ba464dcc5dfab9c9e2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRDP/FreeRDP/commit/2e3b77e28ac6a398897d28ba464dcc5dfab9c9e2"
        }
      ],
      "source": {
        "advisory": "GHSA-3546-x645-5cf8",
        "discovery": "UNKNOWN"
      },
      "title": "FreeRDP: vuln_1_15_1 RDPGFX WIRE_TO_SURFACE_2 Out-of-Bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25941",
    "datePublished": "2026-02-25T19:55:24.984Z",
    "dateReserved": "2026-02-09T16:22:17.787Z",
    "dateUpdated": "2026-02-26T21:33:42.006Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.