Skip to content
OpenAdvisories
High ELSA-2026-50747 1 CVE

Important: freerdp security update (Oracle Linux 10)

Published Aug 5, 2026 · Updated Aug 5, 2026

Ecosystem: Oracle Linux

Summary

[2:3.10.3-12.7]
- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
Resolves: RHEL-194327

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 10 freerdp 2:3.10.3-12.el10_2.7
Oracle Linux · 10 freerdp-devel 2:3.10.3-12.el10_2.7
Oracle Linux · 10 freerdp-libs 2:3.10.3-12.el10_2.7
Oracle Linux · 10 freerdp-server 2:3.10.3-12.el10_2.7
Oracle Linux · 10 libwinpr 2:3.10.3-12.el10_2.7
Oracle Linux · 10 libwinpr-devel 2:3.10.3-12.el10_2.7

Vulnerabilities 1

  • High 7.5
    CVE-2026-55827

    FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap->data …

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine