CVE-2026-33982 Details
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc(). This issue has been patched in version 3.24.2.
A heap-buffer-overflow vulnerability has been identified in FreeRDP versions through 3.24.1. The issue arises in the persistent cache management, specifically within the 'libfreerdp/cache/persistent.c' file. The vulnerability occurs when the 'persistent_cache_new()' function allocates memory for bitmap data using 'calloc'. This allocation method does not properly align the memory, leading to a buffer overflow when the 'persistent_cache_read_entry_v3()' function attempts to read the data. The problem is exacerbated by the fact that the vulnerability can be triggered by any v3 persistent cache file containing an entry larger than 64x64 pixels at 32 bits per pixel, a common scenario. The misalignment causes the signature check to fail, allowing for a mismatched free operation that results in undefined behavior.
Users can upgrade to FreeRDP version 3.24.2, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 31, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/FreeRDP/FreeRDP/commit/a48dbde2c8a5b8b70a9d1c045d969a71afd6284c | [email protected] | Patch |
| https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jm9-2925-g4v2 | [email protected] | MitigationPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| freerdp freerdp | < 3.24.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 1, 2026 | Initial Analysis | [email protected] |
| Mar 30, 2026 | New CVE Received | [email protected] |