Skip to content
OpenAdvisories
High RHSA-2026:38501 1 CVE

Red Hat Security Advisory: freerdp security update

Published Jul 14, 2026 · Updated Oct 7, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-debuginfo 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-debugsource 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-libs 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream freerdp-libs-debuginfo 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr-debuginfo 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream libwinpr-devel 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-debuginfo 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-debugsource 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-devel 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb freerdp-libs-debuginfo 2:2.11.7-10.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb libwinpr-debuginfo 2:2.11.7-10.el8_10

Vulnerabilities 1

  • High 7.7
    CVE-2026-45700

    Heap-buffer-overflow write in planar bitmap decoder

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X d…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2483470
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38501.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-45700
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45700
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45700
  • article
    https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mpxh-8fq3-x8mh