Linux · 
openSUSE Leap · Security advisory · March 10, 2026
openSUSE Leap · Security advisory · March 10, 2026OPENSUSE-SU-2026:20339-1: freerdp security update
OPENSUSE-SU-2026:20339-1, released March 10, 2026, fixes 44 CVEs in freerdp (version 3.22.0-160000.1.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
44
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0372
89th percentile
Priority of the 44 CVEs
Patch now 0
Urgent 1
High 39
Routine 4
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| freerdp | opensuse-leap 16.0 | 3.22.0-160000.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-24677 | freerdp: heap-buffer-overflow in ecam_encoder_compress_h264 (bsc#1257984). | 9.1 | 0.0055 | None reported |
| High | CVE-2024-32459 | libwinpr-tools3-3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0372 | None reported |
| High | CVE-2024-32039 | libfreerdp-client3-3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0228 | None reported |
| High | CVE-2024-32458 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0194 | None reported |
| High | CVE-2024-32041 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0193 | None reported |
| High | CVE-2024-32040 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0191 | None reported |
| High | CVE-2024-32460 | libfreerdp3-3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0191 | None reported |
| High | CVE-2024-32658 | libfreerdp3-3: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0136 | None reported |
| High | CVE-2024-32661 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0121 | None reported |
| High | CVE-2024-32659 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 9.8 | 0.0118 | None reported |
| High | CVE-2024-32660 | freerdp3-shadow-x11: FreeRDP is a free implementation of the Remote Desktop Protocol | 7.5 | 0.0117 | None reported |
| High | CVE-2024-22211 | freerdp: Fixed integer overflow in `freerdp_bitmap_planar_context_reset` that could lead to heap-buffer overflow (bsc#1219049) | 9.8 | 0.0108 | None reported |
| High | CVE-2026-22855 | freerdp: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22859 | freerdp: improper bound check can lead to heap-buffer-overflow in urb_select_configuration (bsc#1256725). | 9.1 | 0.0089 | None reported |
| High | CVE-2026-22853 | freerdp: Fixed heap-buffer-overflow in ndr_read_uint8Array | 9.8 | 0.0078 | None reported |
| High | CVE-2026-22858 | freerdp: Fixed global-buffer-overflow in crypto_base64_devoce | 9.1 | 0.0070 | None reported |
| High | CVE-2026-24678 | freerdp: heap-use-after-free in cam_v4l_stream_capture_thread (bsc#1257985). | 8.1 | 0.0070 | None reported |
| High | CVE-2026-24684 | freerdp: Heap-use-after-free in play_thread (bsc#1257991). | 8.8 | 0.0060 | None reported |
| High | CVE-2026-23732 | freerdp: improper validation can lead to heap buffer overflow in `Glyph_Alloc` (bsc#1256945). | 8.8 | 0.0058 | None reported |
| High | CVE-2026-24679 | freerdp: heap-buffer-overflow in urb_select_interface (bsc#1257986). | 9.1 | 0.0055 | None reported |
| High | CVE-2025-4478 | freerdp: Fixed initialization of function pointers after | 7.1 | 0.0054 | None reported |
| High | CVE-2026-23530 | freerdp: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle` (bsc#1256940). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23531 | freerdp: improper validation in `clear_decompress` can lead to heap buffer overflow (bsc#1256941). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23532 | freerdp: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer | 9.8 | 0.0053 | None reported |
| High | CVE-2026-23533 | freerdp: improper validation can lead to heap buffer overflow in `clear_decompress_residual_data` | 9.8 | 0.0053 | None reported |
Showing 1 to 25 of 44
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.