Skip to content
OpenAdvisories
High ELSA-2026-2714 5 CVEs

Important: freerdp security update (Oracle Linux 7)

Published Mar 16, 2026 · Updated Mar 16, 2026

Ecosystem: Oracle Linux

Summary

[2:2.2.0-5.0.1]
- fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533
CVE-2026-23884 [Orabug: 38971897]

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 freerdp 0:2.1.1-5.0.1.el7_9
Oracle Linux · 7 freerdp-devel 0:2.1.1-5.0.1.el7_9
Oracle Linux · 7 freerdp-libs 0:2.1.1-5.0.1.el7_9
Oracle Linux · 7 libwinpr 0:2.1.1-5.0.1.el7_9
Oracle Linux · 7 libwinpr-devel 0:2.1.1-5.0.1.el7_9

Vulnerabilities 5

  • High 7.7
    CVE-2026-23530

    FreeRDP has heap-buffer-overflow in planar_decompress_plane_rle

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWidth`/`nSrcHeight` against `planar->maxWidth`/`maxHeight` before RLE decode. A malicious server can trigger a c…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi
  • High 7.7
    CVE-2026-23531

    FreeRDP has heap-buffer-overflow in clear_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating the destination rectangle, allowing an out-of-bou…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi
  • High 7.7
    CVE-2026-23532

    FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP client’s `gdi_SurfaceToSurface` path due to a mismatch between destination rectangle clamping and the actual cop…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi
  • High 7.7
    CVE-2026-23533

    FreeRDP has heap-buffer-overflow in clear_decompress_residual_data

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX ClearCodec decode path when maliciously crafted residual data causes out-of-bounds writes during color output. A …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi
  • High 7.7
    CVE-2026-23884

    Heap-use-after-free in gdi_set_bounds

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client‑side us…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi