CVE-2026-29776

3.1 lowEPSS 0.2%

Low (3.1) in freerdp freerdp. EPSS 0.2% chance of exploitation in the next 30 days.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library This vulnerability is fixed in 3.24.0.

Severity

CVSS 3.1

3.1 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWEs: CWE-190, CWE-191, CWE-400, CWE-789
Published: 2026-03-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freerdp:freerdp

References

https://github.com/FreeRDP/FreeRDP/commit/a9e0abf2eac8c2e370fa155bf1abb9d044c0ca8a
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c747-x4wf-cqrr

Check your stack JSON