Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-91946

Fixed in a distro release EPSS <1%CVSS 6.5

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function addresses transmitted in the PDU, defeating heap ASLR and disclosing the GLib module base address.

Published 2026-09-15 · CVE record · OSV

Products: FreeRDP

Distro releases

ReleasePackageFixed in
AlmaLinux 10freerdp2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-devel2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-libs2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-server2:3.10.3-12.el10_2.14
AlmaLinux 10libwinpr2:3.10.3-12.el10_2.14
AlmaLinux 10libwinpr-devel2:3.10.3-12.el10_2.14
Amazon Linux 2freerdp2:2.11.7-1.amzn2.0.16
Amazon Linux 2freerdp-devel2:2.11.7-1.amzn2.0.16
Amazon Linux 2freerdp-libs2:2.11.7-1.amzn2.0.16
Amazon Linux 2libwinpr2:2.11.7-1.amzn2.0.16
Amazon Linux 2libwinpr-devel2:2.11.7-1.amzn2.0.16
Amazon Linux 2023freerdp2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-devel2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-libs2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-server2:3.31.0-1.amzn2023
Amazon Linux 2023libwinpr2:3.31.0-1.amzn2023
Amazon Linux 2023libwinpr-devel2:3.31.0-1.amzn2023
Debian 12freerdp2no fix
Debian 13freerdp3no fix
Debian 14freerdp33.31.0+dfsg-1
Red Hat Enterprise Linux 10.2freerdp2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-debugsource2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-devel2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-libs2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-libs-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-server2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-server-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr-devel2:3.10.3-12.el10_2.14
Rocky Linux 10freerdp2:3.10.3-12.el10_2.14
Ubuntu 16.04 LTSfreerdpno fix
Ubuntu 18.04 LTSfreerdpno fix
Ubuntu 22.04 LTSfreerdp2no fix
Ubuntu 24.04 LTSfreerdp33.31.0+dfsg-0ubuntu0.24.04.1
Ubuntu 26.04 LTSfreerdp33.31.0+dfsg-0ubuntu0.26.04.1
Ubuntu Pro 18.04 LTSfreerdp2no fix
Ubuntu Pro 20.04 LTSfreerdp2no fix
Ubuntu Pro 24.04 LTSfreerdp2no fix