Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX ClearCodec decode path when maliciously crafted residual data causes out-of-bounds writes during color output. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
URGENT: Ubuntu FreeRDP patch USN-8004-2 fixes critical RCE flaw CVE-2026-23533. Affects #Ubuntu 18.04-24.04 LTS. Read more: 👉 https://tinyurl.com/a24vff5s #Security https://t.co/8TIlLWnx2B
Post summary
The tweet announces the Ubuntu FreeRDP patch USN-8004-2 that addresses a critical remote code execution vulnerability CVE-2026-23533 affecting Ubuntu LTS releases.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |