CVE-2026-33985

FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read

CVSS 5.9 MEDIUMEPSS 0.2%CWE-125 CWE-131

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L

Affected products

FreeRDP · FreeRDP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/FreeRDP/FreeRDP/commit/c49d1ad43b8c7b32794d0250f2623c2dccd7ef25 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85