CVE-2026-24677

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.22.0

Description FreeRDP, a Remote Desktop Protocol implementation, contains a flaw in the ecam encoder compress h264 component. The component does not properly validate the source buffer size and relies on dimensions provided by the server, resulting in a potential out-of-bounds read when using the sws scale function.

Recommendations Update to version 3.22.0 or later.