Vulnerabilities
Report: CVE-2026-33986 - FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write
CVE ID :CVE-2026-33986 Published : March 30, 2026, 10:16 p.m. | 1 hour, 17 minutes ago Description :FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are updated before the reallocation loop. If any winpr_aligned_recalloc() call fails, the function returns FALSE but width/height are already inflated. This issue has been patched in version 3.24.2. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...