Threats Tagged 'cve-2026-45700'

A security vulnerability (CVE-2026-45700) in FreeRDP's planar bitmap decoder allows an out-of-bounds write that can lead to arbitrary code execution. This affects the xfreerdp client used to connect to RDP servers. Red Hat has issued a security update for Red Hat Enterprise Linux 9 and related variants to address this issue. The vulnerability is rated as high severity by Red Hat Product Security. The update fixes the flaw by correcting the out-of-bounds write condition.

Multiple vulnerabilities have been identified in FreeRDP, a Remote Desktop Protocol implementation used by the xfreerdp client in Red Hat Enterprise Linux 10 and related CodeReady Linux Builder packages. These include heap-buffer-overflow, use-after-free, out-of-bounds write, and crafted packet issues that could lead to remote code execution or denial of service. Red Hat has released security updates addressing these issues.

Multiple security vulnerabilities affecting FreeRDP were fixed in version 3.26.0. These include heap-buffer-overflow, out-of-bounds read and write, double-free, off-by-one errors, and path traversal issues. The flaws impact various components such as the clipboard channel, RDPGFX PDUs, RDPEAR authentication, and kerberos security context functions. The update addresses these issues to prevent potential denial of service, information disclosure, and remote code execution.