{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for freerdp is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface (CVE-2026-40033)\n\n* freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser (CVE-2026-44422)\n\n* freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700)\n\n* freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs (CVE-2026-44421)\n\n* freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow (CVE-2026-44420)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:36203",
        "url": "https://access.redhat.com/errata/RHSA-2026:36203"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2481473",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481473"
      },
      {
        "category": "external",
        "summary": "2483467",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483467"
      },
      {
        "category": "external",
        "summary": "2483470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483470"
      },
      {
        "category": "external",
        "summary": "2483471",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483471"
      },
      {
        "category": "external",
        "summary": "2483480",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483480"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36203.json"
      }
    ],
    "title": "Red Hat Security Advisory: freerdp security update",
    "tracking": {
      "current_release_date": "2026-07-07T18:57:24+00:00",
      "generator": {
        "date": "2026-07-07T18:57:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2026:36203",
      "initial_release_date": "2026-07-07T14:14:15+00:00",
      "revision_history": [
        {
          "date": "2026-07-07T14:14:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-07T14:14:15+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-07T18:57:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.src",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.src",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.6?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "libwinpr-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "libwinpr-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
                "product": {
                  "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
                  "product_id": "libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.6?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
                "product": {
                  "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_id": "libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.6?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "libwinpr-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "libwinpr-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "freerdp-server-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "freerdp-server-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
                "product": {
                  "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
                  "product_id": "libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.6?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debugsource@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-debuginfo@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-libs-debuginfo@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server-debuginfo@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-debuginfo@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-devel@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/freerdp-server@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                "product": {
                  "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_id": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libwinpr-devel@3.10.3-12.el10_2.6?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.src",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "libwinpr-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "libwinpr-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-server-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64"
        },
        "product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le"
        },
        "product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x"
        },
        "product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        },
        "product_reference": "libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40033",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-05-26T15:01:26.044574+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481473"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FreeRDP.If a user connects to a malicious Remote Desktop (RDP) server, a security flaw in FreeRDP could cause the application to crash or allow the server to run unauthorized code on the user\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in FreeRDP could allow a malicious Remote Desktop server to run unauthorized code or crash the connecting user\u0027s system. Red Hat users are only at risk if they use the FreeRDP client to connect to an untrusted or compromised server.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40033"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481473",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481473"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40033",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40033"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40033",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40033"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/commit/23b36cd00ebf0ccd97750fcdbc9aa2f362352da7",
          "url": "https://github.com/FreeRDP/FreeRDP/commit/23b36cd00ebf0ccd97750fcdbc9aa2f362352da7"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff",
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-in-gdi-cachetosurface-via-rectangle-validation-bypass",
          "url": "https://www.vulncheck.com/advisories/freerdp-heap-buffer-overflow-in-gdi-cachetosurface-via-rectangle-validation-bypass"
        }
      ],
      "release_date": "2026-05-26T14:08:47.535000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-07T14:14:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36203"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid connecting to untrusted or unknown Remote Desktop Protocol (RDP) servers. Restricting FreeRDP client usage to only known and trusted RDP servers can reduce the risk of exploitation.",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface"
    },
    {
      "cve": "CVE-2026-44420",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-05-29T21:01:57.327051+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483480"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-buffer overflow vulnerability exists in the FreeRDP server\u0027s clipboard channel. A remote attacker can exploit this by sending a specially crafted message to the server, which can crash the service (Denial of Service) or potentially allow the attacker to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An authenticated remote attacker can crash the FreeRDP server or execute arbitrary code by exploiting an Important-rated heap-buffer overflow in the server\u0027s clipboard channel.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44420"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483480",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483480"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44420",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44420"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44420",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44420"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvpx-xj7r-3p3r",
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mvpx-xj7r-3p3r"
        }
      ],
      "release_date": "2026-05-29T19:42:23.460000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-07T14:14:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36203"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to the RDP service to trusted clients or networks using firewall rules. If the RDP service is not required, disable it. Changes to network configuration or service status may require a service restart to take full effect. This may cause a temporary disruption in service for your users.",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow"
    },
    {
      "cve": "CVE-2026-44421",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-05-29T21:01:24.644039+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483471"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-buffer-overflow vulnerability exists in FreeRDP when handling Remote Desktop Protocol Graphics (RDPGFX). A malicious or compromised RDP server can exploit this flaw by sending specially crafted graphics packets to a connected client, potentially crashing the client application (Denial of Service) or executing arbitrary code on the user\u0027s machine.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important-rated heap-buffer-overflow vulnerability exists in FreeRDP clients using the RDPGFX feature. If a user connects to a malicious RDP server, the server can trigger this flaw to cause a client crash (Denial of Service) or execute arbitrary code on the client machine. The risk is limited to users connecting to untrusted hosts with RDPGFX enabled.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44421"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483471",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483471"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44421",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44421"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44421",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44421"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff",
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-p6r2-4hgm-m6ff"
        }
      ],
      "release_date": "2026-05-29T19:40:25.492000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-07T14:14:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36203"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, disable the RDPGFX graphics acceleration feature in your FreeRDP client configuration. Additionally, avoid using FreeRDP to connect to untrusted or unknown external servers. This may cause a temporary disruption in service for your users.",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs"
    },
    {
      "cve": "CVE-2026-44422",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-05-29T21:01:10.766168+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483467"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FreeRDP. A malicious server can exploit a heap use-after-free or double-free vulnerability in the FreeRDP client\u0027s RDPEAR authentication-redirection path. This occurs because the RDPEAR NDR parser incorrectly handles pointer reference IDs, leading to the same heap object being assigned to multiple pointer fields. This flaw could allow a remote attacker to execute arbitrary code or cause a denial of service on the client system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A critical FreeRDP flaw in the RDPEAR path incorrectly handles pointer reference IDs. If a user connects to a malicious server, it can trigger a heap use-after-free or double-free, causing arbitrary code execution or a denial of service (DoS).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44422"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483467",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483467"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44422"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j9q5-7g8m-jc9v",
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j9q5-7g8m-jc9v"
        }
      ],
      "release_date": "2026-05-29T19:41:46.829000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-07T14:14:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36203"
        },
        {
          "category": "workaround",
          "details": "To mitigate this risk, avoid connecting to untrusted RDP servers and use firewall rules to restrict FreeRDP clients to trusted servers. If FreeRDP is not needed, remove the package to eliminate the attack vector, though this may affect dependent applications.\n\n**To remove the package:**\n`sudo dnf remove freerdp`",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR parser"
    },
    {
      "cve": "CVE-2026-45700",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-05-29T21:01:21.347217+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The planar bitmap decoder contains an out-of-bounds heap write vulnerability when processing RLE planar data. A remote attacker could exploit this by providing specially crafted RLE planar data, leading to an out-of-bounds write. This could result in arbitrary code execution or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in FreeRDP\u0027s planar bitmap decoder allows an out-of-bounds heap write when processing malicious RLE planar data. An attacker can exploit this by enticing a user to connect to a malicious RDP server, potentially resulting in arbitrary code execution or a denial of service (DoS).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
          "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
          "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45700"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45700"
        },
        {
          "category": "external",
          "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mpxh-8fq3-x8mh",
          "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mpxh-8fq3-x8mh"
        }
      ],
      "release_date": "2026-05-29T19:44:12.385000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-07T14:14:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:36203"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict FreeRDP connections to trusted remote desktop servers. Avoid connecting to untrusted RDP endpoints, as processing malicious RLE planar data from such a server could trigger the vulnerability.",
          "product_ids": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.src",
            "AppStream-10.2.Z:freerdp-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-2:3.10.3-12.el10_2.6.x86_64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "AppStream-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-debugsource-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-devel-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-libs-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:freerdp-server-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-debuginfo-2:3.10.3-12.el10_2.6.x86_64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.aarch64",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.ppc64le",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.s390x",
            "CRB-10.2.Z:libwinpr-devel-2:3.10.3-12.el10_2.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution"
    }
  ]
}