CVE-2026-33983 Details
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is used as a shift exponent, causing undefined behavior and an approximately 80 billion iteration loop (CPU DoS). This issue has been patched in version 3.24.2.
A vulnerability in FreeRDP's progressive codec handling can cause a byte underflow, leading to undefined behavior and a CPU denial-of-service condition. This issue is present in FreeRDP versions through 3.24.1. The vulnerability arises in the 'progressive_decompress_tile_upgrade()' function, which fails to properly handle quantization value mismatches. Instead of terminating execution, it logs a warning and continues, allowing an invalid value to be used as a shift exponent. This error triggers a shift operation violation, causing an estimated 80 billion iteration loop that effectively hangs the CPU. Although the BitStream is bounds-checked, the improper handling of quantization values can still lead to significant performance degradation.
Users can upgrade to FreeRDP version 3.24.2 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 31, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | redhat-SADP |
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
| CWE-252 | Unchecked Return Value | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| freerdp freerdp | < 3.24.2 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 1, 2026 | Initial Analysis | [email protected] |
| Mar 30, 2026 | New CVE Received | [email protected] |