CVE-2026-29776

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

PUBLISHED Reserved 2026-03-04 | Published 2026-03-13 | Updated 2026-03-13 | Assigner GitHub_M

Problem types

CWE-190: Integer Overflow or Wraparound

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-400: Uncontrolled Resource Consumption

CWE-789: Memory Allocation with Excessive Size Value

Product status

References

github.com/...reeRDP/security/advisories/GHSA-c747-x4wf-cqrr

github.com/...ommit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a

cve.org (CVE-2026-29776)

nvd.nist.gov (CVE-2026-29776)

Download JSON