Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | Disclosure1 |
| 2026-02-10 | 2 | Disclosure2 |
| 2026-02-11 | 1 | Disclosure1 |
CVE-2026-24677 Out-of-Bounds Read Vulnerability in FreeRDP Before 3.22.0 H.264 Encoding https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24677
Post summary
The text is a brief disclosure of CVE‑2026‑24677, noting an out‑of‑bounds read in FreeRDP before version 3.22.0 during H.264 encoding, but contains no PoC, exploit, active exploitation, patch, or debunking information.
CVE-2026-24677 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate… https://www.cve.org/CVERecord?id=CVE-2026-24677
Post summary
The text announces CVE-2026-24677, detailing an unchecked server-controlled dimension flaw in FreeRDP's h264 encoder before version 3.22.0, but provides no PoC, exploit, or patch information.
An out-of-bounds read (DEBIAN-CVE-2026-24677) affects `freerdp2`, potentially leading to client data disclosure or crashes when connecting to a malicious RDP server. #FreeRDP #RDP #infosec https://www.pulsepatch.io/posts/cve-2026-24677-freerdp-out-of-bounds-read
Post summary
The post announces an out-of-bounds read vulnerability (DEBIAN-CVE-2026-24677) in freerdp2 that could lead to data disclosure or crashes when connecting to a malicious RDP server, without mentioning exploits, PoCs, or patches.
🔴 CVE-2026-24677 - Critical FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer si... https://www.thehackerwire.com/vulnerability/CVE-2026-24677/ https://t.co/VxHPOs7U2R
Post summary
A critical vulnerability in FreeRDP’s ecam_encoder_compress_h264 function has been disclosed, highlighting a flaw where server‑controlled dimensions are trusted without validating the source buffer.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |