An out-of-bounds write vulnerability (CVE-2026-45700, CVSS 9.8 CRITICAL) in FreeRDP's planar bitmap decoder allows for arbitrary code execution. Affected versions include freerdp versions prior to 3.26.0, and the fixed version is 3.26.0. The advisory is rated Important and applies specifically to FreeRDP packages on Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Telecommunications Update Service.
Red Hat Product Errata RHSA-2026:46388 - Security Advisory Issued: 2026-07-27 Updated: 2026-07-27 RHSA-2026:46388 - Security Advisory Overview Updated Packages Synopsis Important: freerdp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution (CVE-2026-45700) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2483470 - CVE-2026-45700 freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution CVEs CVE-2026-45700 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM freerdp-2.2.0-12.el8_8.9.src.rpm SHA-256: df6711d430a57d1e0efe344d5a5eb76430bbc3d6b2fcd52e78d4c4a9af73ffe2 x86_64 freerdp-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: a9f992ed5567ca35cde276d3f84ffe73faaa2681dbd14d83a7424444fc16e6c1 freerdp-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ed6a5eaee95ff03dd73f61b8e002721985a42c6e18e5dce9cc7237408d731369 freerdp-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: dcd91e6fdd3263a77500a9f35f972cc9a15a564e3417f30bb837cfebd1cd596c freerdp-debugsource-2.2.0-12.el8_8.9.i686.rpm SHA-256: dda54e7bd5a9e8fca9b4992a4fdf6f304390f2fe3b057c901fc8d4019ffcba0a freerdp-debugsource-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: b16f2ab8094bad0dae27dd6134fac1efc3951347e9669d389e9d83967bdadf7e freerdp-libs-2.2.0-12.el8_8.9.i686.rpm SHA-256: 663c3dcd718957388e028715d81330c683273d47b37a333dda1007d62ed72ca2 freerdp-libs-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 16fe021fa49ba46dc1df1f4c84b884c73ba8859f94f255f6434370c848fdcdf4 freerdp-libs-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ef429f2649e3dcbc142d40e596749f99b96d02eadedc19adf7398ef482a0cecd freerdp-libs-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 9c931e8fad43bb7cbd9dde187cf74f19b4fa8cc773e8d76303211b1ad08c08ed libwinpr-2.2.0-12.el8_8.9.i686.rpm SHA-256: 557a55e8fc41d23b99180ca8bcf7b802e9f49752d68be3d17491be40282892fa libwinpr-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: e3975c22b31102253f047555ff32a981c6b0bc92f6cb322ce0f4f52ed0994a97 libwinpr-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: d71358880bcd5b1b274e0bc78d26fde172aeee84b2ca7914b2f7c5c1f950e596 libwinpr-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 4f85ddfb898a45c2f4250ce3bc0c23e7efad2769d97d499603e9474dfae1f366 libwinpr-devel-2.2.0-12.el8_8.9.i686.rpm SHA-256: 610fab69e3d501adaa0a9090842361b616f1b3e12f93bac83076b7e3bd956eb4 libwinpr-devel-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: c86b379af206494fe7e45a80f8d503f5d3accaa37ecbb55e710626e9a8c90e55 Red Hat Enterprise Linux Server - TUS 8.8 SRPM freerdp-2.2.0-12.el8_8.9.src.rpm SHA-256: df6711d430a57d1e0efe344d5a5eb76430bbc3d6b2fcd52e78d4c4a9af73ffe2 x86_64 freerdp-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: a9f992ed5567ca35cde276d3f84ffe73faaa2681dbd14d83a7424444fc16e6c1 freerdp-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ed6a5eaee95ff03dd73f61b8e002721985a42c6e18e5dce9cc7237408d731369 freerdp-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: dcd91e6fdd3263a77500a9f35f972cc9a15a564e3417f30bb837cfebd1cd596c freerdp-debugsource-2.2.0-12.el8_8.9.i686.rpm SHA-256: dda54e7bd5a9e8fca9b4992a4fdf6f304390f2fe3b057c901fc8d4019ffcba0a freerdp-debugsource-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: b16f2ab8094bad0dae27dd6134fac1efc3951347e9669d389e9d83967bdadf7e freerdp-libs-2.2.0-12.el8_8.9.i686.rpm SHA-256: 663c3dcd718957388e028715d81330c683273d47b37a333dda1007d62ed72ca2 freerdp-libs-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 16fe021fa49ba46dc1df1f4c84b884c73ba8859f94f255f6434370c848fdcdf4 freerdp-libs-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ef429f2649e3dcbc142d40e596749f99b96d02eadedc19adf7398ef482a0cecd freerdp-libs-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 9c931e8fad43bb7cbd9dde187cf74f19b4fa8cc773e8d76303211b1ad08c08ed libwinpr-2.2.0-12.el8_8.9.i686.rpm SHA-256: 557a55e8fc41d23b99180ca8bcf7b802e9f49752d68be3d17491be40282892fa libwinpr-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: e3975c22b31102253f047555ff32a981c6b0bc92f6cb322ce0f4f52ed0994a97 libwinpr-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: d71358880bcd5b1b274e0bc78d26fde172aeee84b2ca7914b2f7c5c1f950e596 libwinpr-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 4f85ddfb898a45c2f4250ce3bc0c23e7efad2769d97d499603e9474dfae1f366 libwinpr-devel-2.2.0-12.el8_8.9.i686.rpm SHA-256: 610fab69e3d501adaa0a9090842361b616f1b3e12f93bac83076b7e3bd956eb4 libwinpr-devel-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: c86b379af206494fe7e45a80f8d503f5d3accaa37ecbb55e710626e9a8c90e55 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM freerdp-2.2.0-12.el8_8.9.src.rpm SHA-256: df6711d430a57d1e0efe344d5a5eb76430bbc3d6b2fcd52e78d4c4a9af73ffe2 ppc64le freerdp-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: 8fc42343938a38179566dedb22cee4208b94d2be0aa7581d7d78fd3fd1ca2471 freerdp-debuginfo-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: b79ca8da7a6baaaa774c0601813a394d9d1f2e3728bf60333899da696ef14666 freerdp-debugsource-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: 1bd5316b45fe9ea84ba7ef2089b735958e611cf5ee66a14471239f09397c675e freerdp-libs-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: 17409af072ef4d330f102e8afe45065fa51a57c52c8bdce99de4b222152f73d5 freerdp-libs-debuginfo-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: ebb2ca36e72ccc8fa47d44619f4ac57d391488af2b0c85b4bade57eed1c089e5 libwinpr-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: b95ef73ef3e8b68f548f56c54bcadef09bb03424009d664d03baaf3da77a23d4 libwinpr-debuginfo-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: b19159732e96189a03dec0b09e7a3c23a897584b5cbb54b21a8b900a9bd3f88d libwinpr-devel-2.2.0-12.el8_8.9.ppc64le.rpm SHA-256: 090d427c4f1246ae099147b717b0c7c748b3e3dac3a2e9866c79538235636a55 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM freerdp-2.2.0-12.el8_8.9.src.rpm SHA-256: df6711d430a57d1e0efe344d5a5eb76430bbc3d6b2fcd52e78d4c4a9af73ffe2 x86_64 freerdp-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: a9f992ed5567ca35cde276d3f84ffe73faaa2681dbd14d83a7424444fc16e6c1 freerdp-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ed6a5eaee95ff03dd73f61b8e002721985a42c6e18e5dce9cc7237408d731369 freerdp-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: dcd91e6fdd3263a77500a9f35f972cc9a15a564e3417f30bb837cfebd1cd596c freerdp-debugsource-2.2.0-12.el8_8.9.i686.rpm SHA-256: dda54e7bd5a9e8fca9b4992a4fdf6f304390f2fe3b057c901fc8d4019ffcba0a freerdp-debugsource-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: b16f2ab8094bad0dae27dd6134fac1efc3951347e9669d389e9d83967bdadf7e freerdp-libs-2.2.0-12.el8_8.9.i686.rpm SHA-256: 663c3dcd718957388e028715d81330c683273d47b37a333dda1007d62ed72ca2 freerdp-libs-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 16fe021fa49ba46dc1df1f4c84b884c73ba8859f94f255f6434370c848fdcdf4 freerdp-libs-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: ef429f2649e3dcbc142d40e596749f99b96d02eadedc19adf7398ef482a0cecd freerdp-libs-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 9c931e8fad43bb7cbd9dde187cf74f19b4fa8cc773e8d76303211b1ad08c08ed libwinpr-2.2.0-12.el8_8.9.i686.rpm SHA-256: 557a55e8fc41d23b99180ca8bcf7b802e9f49752d68be3d17491be40282892fa libwinpr-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: e3975c22b31102253f047555ff32a981c6b0bc92f6cb322ce0f4f52ed0994a97 libwinpr-debuginfo-2.2.0-12.el8_8.9.i686.rpm SHA-256: d71358880bcd5b1b274e0bc78d26fde172aeee84b2ca7914b2f7c5c1f950e596 libwinpr-debuginfo-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: 4f85ddfb898a45c2f4250ce3bc0c23e7efad2769d97d499603e9474dfae1f366 libwinpr-devel-2.2.0-12.el8_8.9.i686.rpm SHA-256: 610fab69e3d501adaa0a9090842361b616f1b3e12f93bac83076b7e3bd956eb4 libwinpr-devel-2.2.0-12.el8_8.9.x86_64.rpm SHA-256: c86b379af206494fe7e45a80f8d503f5d3accaa37ecbb55e710626e9a8c90e55 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .