REDHAT-BUG-2514346: Medium severity FreeRDP freerdp vulnerability
Published Aug 11, 2026
·Updated
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.
Affected Software
1 affected component
FreeRDP freerdp<3.30.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 3.30.0
Event History
Aug 11, 2026
Data Sourced
via Red Hat·08:01 PM
DescriptionSeverityAffected Software