What is the CVSS score of CVE-2026-33986?

CVE-2026-33986 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Red Hat are affected by CVE-2026-33986?

CVE-2026-33986 is a heap buffer overflow in FreeRDP's H.264 decoder affecting versions before 3.24.2, allowing remote code execution when users connect to malicious RDP servers.. A patch is available.

Red Hat CVE-2026-33986

EUVD-2026-17233 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-03-30 GitHub_M

Buffer Overflow Heap Overflow Red Hat Suse

7.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 30, 2026 - 22:15 euvd

EUVD-2026-17233

Analysis Generated

Mar 30, 2026 - 22:15 vuln.today

CVE Published

Mar 30, 2026 - 21:43 nvd

HIGH 7.5

DescriptionNVD

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libfreerdp/codec/h264.c, h264->width and h264->height are updated before the reallocation loop. If any winpr_aligned_recalloc() call fails, the function returns FALSE but width/height are already inflated. This issue has been patched in version 3.24.2.

AnalysisAI

Heap buffer overflow in FreeRDP's H.264 YUV decoder (versions before 3.24.2) allows remote attackers to potentially achieve code execution via specially crafted RDP sessions. The vulnerability stems from premature dimension updates in yuv_ensure_buffer() that persist when memory reallocation fails, creating exploitable memory corruption conditions. …

RemediationAI

Within 24 hours: Inventory all systems running FreeRDP versions before 3.24.2 using software asset tools or package managers (rpm/dpkg queries). Within 7 days: Isolate or restrict RDP access from untrusted sources via firewall rules; notify users to avoid connecting to unverified RDP servers. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-9277 HIGH This Week

8.1 May 22

Command injection in the shell-quote npm package allows attackers who can influence object-token inputs to inject arbitr

CVE-2026-9256 HIGH This Week

8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

Vendor StatusVendor

Ubuntu

Priority: Medium

freerdp

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
jammy	DNE	-
noble	DNE	-
questing	DNE	-
upstream	needs-triage	-

freerdp2

Release	Status	Version
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
questing	DNE	-
upstream	needs-triage	-

freerdp3

Release	Status	Version
jammy	DNE	-
noble	needs-triage	-
questing	needs-triage	-
upstream	needs-triage	-

Debian

freerdp2

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	2.3.0+dfsg1-2+deb11u1	-
bullseye (security)	vulnerable	2.3.0+dfsg1-2+deb11u3	-
bookworm	vulnerable	2.11.7+dfsg1-6~deb12u1	-
(unstable)	fixed	(unfixed)	-

freerdp3

Release	Status	Fixed Version	Urgency
trixie	vulnerable	3.15.0+dfsg-2.1	-
forky, sid	fixed	3.24.2+dfsg-1	-
(unstable)	fixed	3.24.2+dfsg-1	-

CVE-2026-33986 vulnerability details – vuln.today

Back

Red Hat CVE-2026-33986

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

More from same product – last 7 days

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code