Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value (>= 89). The unvalidated step index is read directly from the network and used to index into a 89-entry lookup table, triggering a WINPR_ASSERT() failure and process abort via SIGABRT. This affects any FreeRDP client that has audio redirection (RDPSND) enabled, which is the default configuration. This issue has been patched in version 3.24.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeRDP | FreeRDP | < 3.24.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freerdp3 | 3.24.2+dfsg-1 | — |
| Debian 13 | freerdp3 | 3.15.0+dfsg-2.1+deb13u2 | — |
| Debian 12 | freerdp2 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | freerdp3 | 3.30.0+dfsg-0ubuntu0.26.04.1 | USN-8561-1 |
| Ubuntu 25.10 | freerdp3 | No fix yet | — |
| Ubuntu 24.04 LTS | freerdp3 | 3.30.0+dfsg-0ubuntu0.24.04.1 | USN-8561-1 |
| Ubuntu 22.04 LTS | freerdp2 | No fix yet | — |
| Ubuntu 18.04 LTS | freerdp | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | freerdp | No fix yet | — |
| Ubuntu Pro 24.04 LTS | freerdp2 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | freerdp2 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | freerdp2 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | freerdp | 3.10.3-150700.3.17.1 | SUSE-SU-2026:3562-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | freerdp | 3.24.2-1.1 | openSUSE-SU-2026:10633-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | freerdp | 3.24.2-r0 | — |
| Alpine v3.23 | freerdp | 3.24.2-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | freerdp +5 | 2:3.6.3-1.amzn2023.0.10 | ALAS2023-2026-1549 |
| Amazon Linux 2 | freerdp +4 | 2:2.11.7-1.amzn2.0.10 | ALAS2-2026-3238 |
Advisories 6
- USN-8561-1 freerdp3 vulnerabilities Ubuntu Security Notices (USN) · Oct 1, 2026
- WID-SEC-2026-0880 FreeRDP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 28, 2026
- SUSE-SU-2026:3562-1 Security update for freerdp SUSE / openSUSE Security Updates · Aug 12, 2026
- openSUSE-SU-2026:10633-1 freerdp-3.24.2-1.1 on GA media SUSE / openSUSE Security Updates · Apr 29, 2026
- ALAS2-2026-3238 Important: freerdp security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 13, 2026
- ALAS2023-2026-1549 Important: freerdp security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 13, 2026