Report: CVE-2026-33983 - FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS
CVE ID :CVE-2026-33983 Published : March 30, 2026, 10:16 p.m. | 1 hour, 17 minutes ago Description :FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is used as a shift exponent, causing undefined behavior and an approximately 80 billion iteration loop (CPU DoS). This issue has been patched in version 3.24.2. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...