Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-33982

FreeRDP: Persistent Cache Allocator Mismatch - Heap OOB Read

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc(). This issue has been patched in version 3.24.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • < 3.24.2affected

References