Critical Security Flaw in FreeRDP: Heap and Global Buffer Overflows
Summary
ALSA-2026:3334: Important: freerdp security update. Affects freerdp versions < 2:2.11.7-3.el8_10. Fixed in 2:2.11.7-3.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote servers such as Microsoft Windows machines, xrdp, and VirtualBox. It is released under the Apache license and is widely used for remote desktop access. The recent vulnerabilities discovered in FreeRDP could lead to severe security risks, including unauthorized access and system crashes, making it crucial for users to stay updated with the latest patches.
Vulnerability Detail
The vulnerabilities in FreeRDP include multiple heap-buffer-overflow and global-buffer-overflow issues. These vulnerabilities can be exploited by attackers to execute arbitrary code, potentially leading to unauthorized access to sensitive data or complete system compromise. The specific CVEs associated with these vulnerabilities are CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859. Attackers can exploit these flaws by crafting malicious RDP packets that trigger the buffer overflows, allowing them to manipulate the memory of the affected application.
How To Fix
Minimum fixed version
2:2.11.7-3.el8_10
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to RDP services or use a firewall to restrict incoming connections until the patch is applied. Additionally, disabling RDP services on systems that do not require remote access can mitigate the risk.
Conclusion
The vulnerabilities in FreeRDP pose significant security risks that can lead to unauthorized access and system compromise. It is essential for users to update their packages to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote desktops and servers.
Heap and global buffer overflows are types of vulnerabilities where data exceeds the allocated buffer size, potentially allowing attackers to overwrite memory and execute arbitrary code.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
If immediate updates are not possible, consider implementing workarounds such as restricting RDP access and disabling the service on non-essential systems.
Detailed information about the vulnerabilities can be found on the CVE pages for CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
