Skip to content
OpenAdvisories
High ALAS2023-2026-1549 9 CVEs

Important: freerdp security update (Amazon Linux 2023)

Published Apr 13, 2026 · Updated Apr 13, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33995: double free in kerberos_AcceptSecurityContext and kerberos_IntitalizeSecurityContextA NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mv25-f4p2-5mxx CVE-2026-33987: Persistent Cache bmpSize Desync - Heap OOB Write NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ff8h-p5vc-wcwc CVE-2026-33986: H.264 YUV Buffer Dimension Desync - Heap OOB Write NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 CVE-2026-33985: ClearCodec Glyph Cache Count Desync - Heap OOB Read NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85 CVE-2026-33984: ClearCodec resize_vbar_entry() Heap OOB Write NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8469-2xcx-frf6 CVE-2026-33983: Progressive Codec Quant BYTE Underflow - UB + CPU DoS NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gfm-4p52-h478 CVE-2026-33982: Persistent Cache Allocator Mismatch - Heap OOB Read NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jm9-2925-g4v2 CVE-2026-33977: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331) NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8f2g-3q27-6xm5 CVE-2026-33952: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93

Fixed packages 11

ReleasePackageFixed in
Amazon Linux · 2023 freerdp 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-debuginfo 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-debugsource 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-devel 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-libs 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-libs-debuginfo 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-server 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 freerdp-server-debuginfo 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 libwinpr 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 libwinpr-debuginfo 2:3.6.3-1.amzn2023.0.10
Amazon Linux · 2023 libwinpr-devel 2:3.6.3-1.amzn2023.0.10

Vulnerabilities 9

  • High 7.5
    CVE-2026-33984

    FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEntry->size is updated to vBarEntry->count before the winpr_aligned_recalloc() call. If realloc fails, size is in…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-33986

    FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are updated before the reallocation loop. If any winpr_aligned_recalloc() call fails, the…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • High 7.1
    CVE-2026-33982

    FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc(). This issue has been patched in version 3.24.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • High 7.1
    CVE-2026-33987

    FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize is updated before winpr_aligned_recalloc(). If realloc fails, bmpSize is inflat…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.9
    CVE-2026-33977

    FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value (>= 89). The unvalidated step inde…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2026-33983

    FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 6.0
    CVE-2026-33952

    FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting thr…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2026-33985

    FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2026-33995

    FreeRDP: Possible double free in kerberos_AcceptSecurityContext

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityContext() and kerberos_InitializeSecurityContextA() (WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c) can cause a cr…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33952.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33977.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33982.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33983.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33984.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33985.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33986.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33987.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33995.html