CVE-2026-33983

The connected Debian tracker for CVE-2026-33983 names it as “Progressive Codec Quant BYTE Underflow - UB + CPU DoS.” No vendor, product, or version details are provided in the documents. The vulnerability is described as an underflow causing a CPU Denial of Service, but there is no information he...

CVE-2026-33983 FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...