Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-91959

Fixed in a distro release EPSS <1%CVSS 6.5

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.

Published 2026-09-15 · CVE record · OSV

Products: FreeRDP

Distro releases

ReleasePackageFixed in
AlmaLinux 10freerdp2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-devel2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-libs2:3.10.3-12.el10_2.14
AlmaLinux 10freerdp-server2:3.10.3-12.el10_2.14
AlmaLinux 10libwinpr2:3.10.3-12.el10_2.14
AlmaLinux 10libwinpr-devel2:3.10.3-12.el10_2.14
AlmaLinux 8freerdp2:2.11.7-14.el8_10
AlmaLinux 8freerdp-devel2:2.11.7-14.el8_10
AlmaLinux 8freerdp-libs2:2.11.7-14.el8_10
AlmaLinux 8libwinpr2:2.11.7-14.el8_10
AlmaLinux 8libwinpr-devel2:2.11.7-14.el8_10
AlmaLinux 9freerdp2:2.11.7-7.el9_8.8
AlmaLinux 9freerdp-devel2:2.11.7-7.el9_8.8
AlmaLinux 9freerdp-libs2:2.11.7-7.el9_8.8
AlmaLinux 9libwinpr2:2.11.7-7.el9_8.8
AlmaLinux 9libwinpr-devel2:2.11.7-7.el9_8.8
Amazon Linux 2freerdp2:2.11.7-1.amzn2.0.16
Amazon Linux 2freerdp-devel2:2.11.7-1.amzn2.0.16
Amazon Linux 2freerdp-libs2:2.11.7-1.amzn2.0.16
Amazon Linux 2libwinpr2:2.11.7-1.amzn2.0.16
Amazon Linux 2libwinpr-devel2:2.11.7-1.amzn2.0.16
Amazon Linux 2023freerdp2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-devel2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-libs2:3.31.0-1.amzn2023
Amazon Linux 2023freerdp-server2:3.31.0-1.amzn2023
Amazon Linux 2023libwinpr2:3.31.0-1.amzn2023
Amazon Linux 2023libwinpr-devel2:3.31.0-1.amzn2023
Debian 12freerdp2no fix
Debian 13freerdp3no fix
Debian 14freerdp33.31.0+dfsg-1
Red Hat Enterprise Linux 10.2freerdp2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-debugsource2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-devel2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-libs2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-libs-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-server2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2freerdp-server-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr-debuginfo2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 10.2libwinpr-devel2:3.10.3-12.el10_2.14
Red Hat Enterprise Linux 8freerdp2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8freerdp-debuginfo2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8freerdp-debugsource2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8freerdp-devel2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8freerdp-libs2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8freerdp-libs-debuginfo2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8libwinpr2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8libwinpr-debuginfo2:2.11.7-14.el8_10
Red Hat Enterprise Linux 8libwinpr-devel2:2.11.7-14.el8_10
Red Hat Enterprise Linux 9freerdp2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9freerdp-debuginfo2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9freerdp-debugsource2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9freerdp-devel2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9freerdp-libs2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9freerdp-libs-debuginfo2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9libwinpr2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9libwinpr-debuginfo2:2.11.7-7.el9_8.8
Red Hat Enterprise Linux 9libwinpr-devel2:2.11.7-7.el9_8.8
Rocky Linux 10freerdp2:3.10.3-12.el10_2.14
Rocky Linux 8freerdp2:2.11.7-14.el8_10
Rocky Linux 9freerdp2:2.11.7-7.el9_8.8
Ubuntu 16.04 LTSfreerdpno fix
Ubuntu 18.04 LTSfreerdpno fix
Ubuntu 22.04 LTSfreerdp2no fix
Ubuntu 24.04 LTSfreerdp33.31.0+dfsg-0ubuntu0.24.04.1
Ubuntu 26.04 LTSfreerdp33.31.0+dfsg-0ubuntu0.26.04.1
Ubuntu Pro 18.04 LTSfreerdp2no fix
Ubuntu Pro 20.04 LTSfreerdp2no fix
Ubuntu Pro 24.04 LTSfreerdp2no fix