High severity7.5NVD Advisory· Published Mar 30, 2026· Updated Jul 15, 2026
CVE-2026-33984
CVE-2026-33984
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libfreerdp/codec/clear.c, vBarEntry->size is updated to vBarEntry->count before the winpr_aligned_recalloc() call. If realloc fails, size is inflated while pixels still points to the old, smaller buffer. On a subsequent call where count <= size (the inflated value), realloc is skipped. The caller then writes count * bpp bytes of attacker-controlled pixel data into the undersized buffer, causing a heap buffer overflow. This issue has been patched in version 3.24.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- osv-coords7 versionspkg:rpm/almalinux/freerdppkg:rpm/almalinux/freerdp-develpkg:rpm/almalinux/freerdp-libspkg:rpm/almalinux/freerdp-serverpkg:rpm/almalinux/libwinprpkg:rpm/almalinux/libwinpr-develpkg:rpm/opensuse/freerdp&distro=openSUSE%20Tumbleweed
< 2:2.11.7-1.el9_7.6+ 6 more
- (no CPE)range: < 2:2.11.7-1.el9_7.6
- (no CPE)range: < 2:2.11.7-1.el9_7.6
- (no CPE)range: < 2:2.11.7-1.el9_7.6
- (no CPE)range: < 2:3.10.3-5.el10_1.6
- (no CPE)range: < 2:2.11.7-1.el9_7.6
- (no CPE)range: < 2:2.11.7-1.el9_7.6
- (no CPE)range: < 3.24.2-1.1
Patches
Vulnerability mechanics
References
19- github.com/FreeRDP/FreeRDP/commit/dc7fdb165095139be779a4000199bc1706b06ad5nvdPatch
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8469-2xcx-frf6nvdPatchVendor Advisory
- access.redhat.com/errata/RHSA-2026:10709nvd
- access.redhat.com/errata/RHSA-2026:11332nvd
- access.redhat.com/errata/RHSA-2026:11333nvd
- access.redhat.com/errata/RHSA-2026:11336nvd
- access.redhat.com/errata/RHSA-2026:11649nvd
- access.redhat.com/errata/RHSA-2026:11651nvd
- access.redhat.com/errata/RHSA-2026:12359nvd
- access.redhat.com/errata/RHSA-2026:12388nvd
- access.redhat.com/errata/RHSA-2026:19033nvd
- access.redhat.com/errata/RHSA-2026:19349nvd
- access.redhat.com/errata/RHSA-2026:8457nvd
- access.redhat.com/errata/RHSA-2026:8458nvd
- access.redhat.com/errata/RHSA-2026:8945nvd
- access.redhat.com/errata/RHSA-2026:9656nvd
- access.redhat.com/security/cve/CVE-2026-33984nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33984.jsonnvd
News mentions
0No linked articles in our index yet.