Skip to content
OpenAdvisories
High ALAS2-2026-3238 6 CVEs

Important: freerdp security update (Amazon Linux 2)

Published Apr 13, 2026 · Updated Apr 13, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-33986: H.264 YUV Buffer Dimension Desync - Heap OOB Write NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 CVE-2026-33985: ClearCodec Glyph Cache Count Desync - Heap OOB Read NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85 CVE-2026-33984: ClearCodec resize_vbar_entry() Heap OOB Write NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8469-2xcx-frf6 CVE-2026-33983: Progressive Codec Quant BYTE Underflow - UB + CPU DoS NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gfm-4p52-h478 CVE-2026-33977: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331) NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8f2g-3q27-6xm5 CVE-2026-33952: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 freerdp 2:2.11.7-1.amzn2.0.10
Amazon Linux · 2 freerdp-debuginfo 2:2.11.7-1.amzn2.0.10
Amazon Linux · 2 freerdp-devel 2:2.11.7-1.amzn2.0.10
Amazon Linux · 2 freerdp-libs 2:2.11.7-1.amzn2.0.10
Amazon Linux · 2 libwinpr 2:2.11.7-1.amzn2.0.10
Amazon Linux · 2 libwinpr-devel 2:2.11.7-1.amzn2.0.10

Vulnerabilities 6

  • High 7.5
    CVE-2026-33984

    FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEntry->size is updated to vBarEntry->count before the winpr_aligned_recalloc() call. If realloc fails, size is in…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-33986

    FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are updated before the reallocation loop. If any winpr_aligned_recalloc() call fails, the…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.9
    CVE-2026-33977

    FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value (>= 89). The unvalidated step inde…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2026-33983

    FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.0
    CVE-2026-33952

    FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting thr…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2026-33985

    FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33952.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33977.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33983.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33984.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33985.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33986.html