CVE-2026-33986

Vulnerability CVE-2026-33986 affects FreeRDP prior to 3.24.2. In yuv_ensure_buffer() (libfreerdp/codec/h264.c), h264->width and h264->height are inflated before the reallocation loop; if winpr_aligned_recalloc() fails, the function returns FALSE but width/height remain inflated. This is res...