CVE-2026-33982 in FreeRDP
Summary
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc(). This issue has been patched in version 3.24.2.
Responsible
GitHub_M
Reservation
03/24/2026
Disclosure
03/31/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354278 | FreeRDP winpr_aligned_offset_recalloc out-of-bounds | 125 | Not defined | Official fix | CVE-2026-33982 |