Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-24677
9.1
CRITICALCVSS v3
Published
February 9, 2026
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in sws_scale. This vulnerability is fixed in 3.22.0.
GitHub