Ubuntu FreeRDP Out-of-Bounds Heap Write Fix CVE-2026-45700

Vulnerability Overview Vulnerability ID: USN-8432-1 Release Date: June 16, 2026 Description: An error in memory handling in FreeRDP may lead to a heap buffer overflow. Attackers may exploit this issue to cause a denial of service or execute arbitrary code. CVE ID: CVE-2026-45700 Affected Systems Affected Software: FreeRDP2 and FreeRDP3 Affected Versions: - Ubuntu 26.04 LTS (resolute) - Ubuntu 25.10 (questing) - Ubuntu 24.04 LTS (noble) - Ubuntu 22.04 LTS (jammy) - Ubuntu 20.04 LTS (focal) - Ubuntu 18.04 LTS (bionic) Remediation Updated Package Versions: - Ubuntu 26.04 LTS (resolute): - freerdp2-x11: 3.24.2+dfsg1ubuntu1.1 - freerdp3-x11: 3.24.2+dfsg1ubuntu1.1 - libfreerdp3-3: 3.24.2+dfsg1ubuntu1.1 - Ubuntu 25.10 (questing): - freerdp3-x11: 3.16.0+dfsg1ubuntu0.5 - libfreerdp3-3: 3.16.0+dfsg1ubuntu0.5 - Ubuntu 24.04 LTS (noble): - freerdp2-x11: 2.11.5+dfsg1ubuntu0.1-esm6 - freerdp3-x11: 3.5.1+dfsg1ubuntu1.6 - libfreerdp2-2t64: 2.11.5+dfsg1ubuntu0.1-esm6 - libfreerdp3-3: 3.5.1+dfsg1ubuntu1.6 - Ubuntu 22.04 LTS (jammy): - freerdp2-x11: 2.6.1+dfsg1ubuntu2.11 - libfreerdp2-2: 2.6.1+dfsg1ubuntu2.11 - Ubuntu 20.04 LTS (focal): - freerdp2-x11: 2.6.1+dfsg1ubuntu0.20.04.2+esm4 - libfreerdp2-2: 2.6.1+dfsg1ubuntu0.20.04.2+esm4 - Ubuntu 18.04 LTS (bionic): - freerdp2-x11: 2.2.0+dfsg1ubuntu0.18.04.4+esm6 - libfreerdp2-2: 2.2.0+dfsg1ubuntu0.18.04.4+esm6 Update Method: - Standard system updates will apply all necessary changes. - The vulnerability can be fixed via standard system updates. References Launchpad Bug: https://launchpad.net/bugs/2149819 CVE: CVE-2026-45700 Additional Information Ubuntu Pro: Provides ten years of security coverage for over 25,000 packages, free for up to five machines.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu FreeRDP Out-of-Bounds Heap Write Fix CVE-2026-45700