What is the CVSS score of CVE-2026-63117?

CVE-2026-63117 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2026-63117?

Yes, a patch is available for CVE-2026-63117. Update the affected software to the latest version immediately.

FreeRDP CVE-2026-63117

EUVD-2026-62670 MEDIUM

Divide By Zero (CWE-369)

2026-08-19 security-advisories@github.com

Information Disclosure Red Hat Suse

6.5

CVSS 3.1 · Vendor: github

Severity by source

Vendor (github) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

6.5 MEDIUM

PR:L because a valid RDP authentication session is required; AV:N as exploitation occurs over the network during format negotiation; C/I:N as only the rdpsnd process crashes with no data exposure or modification.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Red Hat

6.5 MEDIUM

qualitative

Primary rating from Vendor (github).

CVSS VectorVendor: github

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch available

Aug 19, 2026 - 19:18 EUVD

Source Code Evidence Fetched

Aug 19, 2026 - 18:37 vuln.today

Analysis Generated

Aug 19, 2026 - 18:37 vuln.today

DescriptionCVE.org

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsnd_server_select_format in channels/rdpsnd/server/rdpsnd_main.c equal zero. The subsequent out_frames modulo bs operation raises SIGFPE and terminates the server-side rdpsnd channel process. This vulnerability fixed in 3.28.0.

AnalysisAI

Server-side divide-by-zero in FreeRDP's rdpsnd audio channel allows any authenticated RDP client to crash the server-side audio process. By advertising a DVI ADPCM format with nBlockAlign=8 and nChannels=2, the client forces the bs block-size calculation to zero; the subsequent modulo operation raises SIGFPE and terminates the rdpsnd channel process. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The attacker must be an authenticated RDP client (PR:L per CVSS vector) - unauthenticated exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) is well-calibrated to this vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade FreeRDP to version 3.28.0 or later; this is the vendor-confirmed fix per the GitHub release at https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0. … Detailed patch versions, workarounds, and compensating controls in full report.