VDB
DEBIAN-CVE-2026-33985
DEBIAN-CVE-2026-33985
PUBLISHED
CVSS 7.099999904632568 HIGH
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2.
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | freerdp2 | 0, 2.10.0+dfsg1-1, 2.10.0+dfsg1-1.1 |
| Debian:14 | freerdp3 | 3.20.2+dfsg-1, 3.21.0+dfsg-1, 3.22.0+dfsg-1 |
| Debian:13 | freerdp3 | 0, 3.15.0+dfsg-2.1, 3.15.0+dfsg-2.1+deb13u1 |
Timeline
- Mar 30, 2026 CVE Published
- Oct 1, 2026 CVE Updated