Kritisch 9.8Software
CVE-2026-55191
FreeRDP: Mehrere Schwachstellen
Open Source FreeRDP, Oracle Linux, Red Hat Enterprise Linux, RESF Rocky Linux
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculate the intermediate YUV444 allocation size in libfreerdp/codec/h264.c with 32-bit multiplication in avc444_ensure_buffer. A malicious RDP server can supply surface dimensions for which piDstStride multiplied by padDstHeight wraps to a small nonzero value, causing winpr_aligned_recalloc to allocate an undersized…
19. Aug 2026
Original bei CERT-Bund öffnen