PT-2026-61023

🗓️ 07 Jul 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

FreeRDP vulnerability: out-of-bounds read in glyph cache get() enables disclosure, crash, or code execution; versions unspecified.

Reporter	Title	Published	Views	Family All 1005
Vulnrichment	CVE-2026-44422 FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion	29 May 202619:41	–	vulnrichment
Vulnrichment	CVE-2026-56297 FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback	8 Jul 202613:49	–	vulnrichment
Vulnrichment	CVE-2026-57156 FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing	10 Jul 202619:52	–	vulnrichment
Vulnrichment	CVE-2026-57157 Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName	10 Jul 202619:51	–	vulnrichment
Vulnrichment	CVE-2026-57158 FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530	10 Jul 202619:49	–	vulnrichment
Vulnrichment	CVE-2026-27951 FreeRDP has possible Integer overflow in Stream_EnsureCapacity	25 Feb 202621:07	–	vulnrichment
Vulnrichment	CVE-2026-29776 FreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library	13 Mar 202617:33	–	vulnrichment
Vulnrichment	CVE-2026-31806 FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions	13 Mar 202617:40	–	vulnrichment
Vulnrichment	CVE-2026-31883 FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write	13 Mar 202617:35	–	vulnrichment
Vulnrichment	CVE-2026-31884 FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0	13 Mar 202617:36	–	vulnrichment

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2026-40033
cve	www.cve.org/CVERecord
ubuntu	www.ubuntu.com/security/CVE-2026-55648
ubuntu	www.ubuntu.com/security/CVE-2026-57158
ubuntu	www.ubuntu.com/security/CVE-2026-55194
ubuntu	www.ubuntu.com/security/CVE-2026-55191
ubuntu	www.ubuntu.com/security/CVE-2026-31806
ubuntu	www.ubuntu.com/security/CVE-2026-40254
ubuntu	www.ubuntu.com/security/CVE-2026-33987
ubuntu	www.ubuntu.com/security/CVE-2026-29776

20 Jul 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.8 - 9.8

CVSS 49.3

EPSS0.03665

SSVC