Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-33987

Опубликовано: 30 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize is updated before winpr_aligned_recalloc(). If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This issue has been patched in version 3.24.2.

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/noble

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

3.24.2+dfsg-1ubuntu1
jammy

DNE

noble

released

3.30.0+dfsg-0ubuntu0.24.04.1
questing

ignored

end of life, was needs-triage
resolute

not-affected

3.24.2+dfsg-1ubuntu1
upstream

released

3.24.2

Показывать по

EPSS

Процентиль: 1%
0.001
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
4 месяца назад

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize is updated before winpr_aligned_recalloc(). If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This issue has been patched in version 3.24.2.

CVSS3: 7.1
nvd
4 месяца назад

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry_v3() in libfreerdp/cache/persistent.c, persistent->bmpSize is updated before winpr_aligned_recalloc(). If realloc fails, bmpSize is inflated while bmpData points to the old buffer. This issue has been patched in version 3.24.2.

CVSS3: 7.1
debian
4 месяца назад

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...

CVSS3: 7.1
fstec
4 месяца назад

Уязвимость функции persistent_cache_read_entry_v3() RDP-клиента FreeRDP, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации

CVSS3: 7.1
redos
около 2 месяцев назад

Уязвимость freerdp3

EPSS

Процентиль: 1%
0.001
Низкий

7.1 High

CVSS3