CVE-2026-85090

FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the generalChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A malicious RDP server can craft a RFXAVC444BITMAPSTREAM with specific frame geometry to trigger an out-of-bounds memory read past the allocate...

PT-2026-84904

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An issue exists in the general ChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A malicious RDP server can send a specially crafted RFX AVC444 BITMAP STREAM with specific frame...

Linux Distros Unpatched Vulnerability : CVE-2026-85090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the generalChromaV1ToYUV444 function during AVC444 chroma plane reconstruction. A...