CVE-2026-29776

FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library

Summary

Original description

The description as published by the source.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2026-29776 freerdp2
Ubuntu UBUNTU-CVE-2026-29776 freerdp

References

advisory github.com
advisory github.com
advisory nvd.nist.gov
patch github.com

Metadata

CVE: CVE-2026-29776
GHSA: GHSA-c747-x4wf-cqrr
Published: 2026-03-13
First seen on SecPulse: 7 months ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-190 CWE-191 CWE-400 CWE-789

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago