Critical Security Update for FreeRDP: Addressing Heap and Global Buffer Overflows
Summary
ALSA-2026:3067: Important: freerdp security update. Affects freerdp versions < 2:2.11.7-1.el9_7.2. Fixed in 2:2.11.7-1.el9_7.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote servers, including Microsoft Windows machines, xrdp, and VirtualBox. It is widely used for remote desktop access due to its flexibility and compatibility with various systems. However, recent vulnerabilities have been identified that could compromise the security of systems using FreeRDP.
Vulnerability Detail
The vulnerabilities in FreeRDP include heap-buffer-overflow and global-buffer-overflow issues. These vulnerabilities arise from improper handling of memory allocation, which can lead to memory corruption, crashes, or even arbitrary code execution. Specifically, CVE-2026-22855 and CVE-2026-22859 detail heap-buffer-overflow vulnerabilities, while CVE-2026-22858 describes a global-buffer-overflow. Exploiting these vulnerabilities could allow an attacker to execute malicious code on the affected system, posing a significant security risk.
How To Fix
Minimum fixed version
2:2.11.7-1.el9_7.2
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of FreeRDP by restricting access to the application or using alternative remote desktop solutions until the update is applied. Additionally, disabling certain features that may trigger the vulnerabilities can help mitigate risks.
Conclusion
The identified vulnerabilities in FreeRDP pose significant security risks that can lead to memory corruption and potential code execution. It is crucial for users to update to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for vulnerabilities in real-time, ensuring better security for your applications.
See every vulnerability recorded for freerdp →
FAQ
The main vulnerabilities include heap-buffer-overflow and global-buffer-overflow, which can lead to memory corruption and potential code execution.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
If an immediate update is not possible, consider restricting access to the application and disabling features that may expose the vulnerabilities.
While specific exploits may not be publicly disclosed, the nature of the vulnerabilities suggests that they could be exploited for arbitrary code execution.
It is recommended to regularly check for updates to FreeRDP and other software packages to ensure you have the latest security patches.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
