CVE-2026-29776

Katalog CVE

CVSS 3.1 · Low EPSS 0,29%

Kerentanan Integer Overflow or Wraparound pada freerdp. Skor CVSS 3.1 3.1 (Low) menurut github.com.

Deskripsi (NVD)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

Rincian

Terbit di NVD

13 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.1 (Low), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-400: Uncontrolled Resource Consumption
CWE-789: Memory Allocation with Excessive Size Value

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr patch · advisory vendor
• https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a patch