CVE-2026-63117

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-63117
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63117.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63117
Aliases
  • GHSA-v64m-xxfw-hrv6
Downstream
Related
Published
2026-08-19T17:55:39Z
Modified
2026-09-11T08:36:38Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
FreeRDP: Denial of service through ADPCM frame size calculation
Details

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsnd_server_select_format in channels/rdpsnd/server/rdpsnd_main.c equal zero. The subsequent out_frames modulo bs operation raises SIGFPE and terminates the server-side rdpsnd channel process. This vulnerability fixed in 3.28.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-369"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63117.json"
}
References

Affected packages

Git / github.com/freerdp/freerdp

Affected ranges

Type
GIT
Repo
https://github.com/freerdp/freerdp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b78fc0b138fe8f08a8b102e193ffb32986f4449a
Fixed
5370fb26fbf034ecd11d3026b6ad639b5fff493f
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.28.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

1.*
1.0-beta1
1.0-beta2
1.0-beta4
1.0-beta5
1.0.0
1.0.1
1.1.0-beta+2013071101
1.1.0-beta1
1.1.0-beta1+android2
1.1.0-beta1+android3
1.1.0-beta1+android4
1.1.0-beta1+android5
1.1.0-beta1+ios1
1.1.0-beta1+ios2
1.1.0-beta1+ios3
1.1.0-beta1+ios4
1.2.0-beta1+android7
1.2.0-beta1+android9
2.*
2.0.0
2.0.0-beta1+android10
2.0.0-beta1+android11
2.0.0-rc0
2.0.0-rc1
2.0.0-rc2
2.0.0-rc3
2.0.0-rc4
3.*
3.0.0
3.0.0-beta1
3.0.0-beta2
3.0.0-beta3
3.0.0-beta4
3.0.0-rc0
3.1.0
3.2.0
3.3.0
3.4.0
3.5.0
3.5.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63117.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "196370970308247970626561756370893169118",
            "length": 2151
        },
        "id": "CVE-2026-63117-35f9b656",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/freerdp/freerdp/commit/b78fc0b138fe8f08a8b102e193ffb32986f4449a",
        "target": {
            "file": "channels/rdpsnd/server/rdpsnd_main.c",
            "function": "rdpsnd_server_select_format"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "244337561881823530126355423847619138045",
            "length": 2064
        },
        "id": "CVE-2026-63117-b7325b75",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/freerdp/freerdp/commit/b78fc0b138fe8f08a8b102e193ffb32986f4449a",
        "target": {
            "file": "channels/rdpsnd/server/rdpsnd_main.c",
            "function": "rdpsnd_server_recv_formats"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "92080791832453961197867119542612984342",
                "260702203712035439855518403350032671944",
                "41613030282239485201489285184661794776",
                "279122289017783586170999661712982315155",
                "99371922184513104268630993667637473630",
                "43172879643769176880401935954265755609",
                "240738237806387888843715554049442874962",
                "300359746963504385011469722398319593286",
                "109511278063154033093040877910952183449",
                "6145773417871659421283411281988350579",
                "34767696132120802475449418146477378617",
                "272872259112074431086899800750361894738",
                "250462095501048410321726861742489415148",
                "335406945537100510402440484650816779010",
                "276944286145009017626522834930226243097",
                "40267708635510528343403960894559935781",
                "39462709011804418773812445268289200495",
                "272872259112074431086899800750361894738",
                "334140187591705128187523853822308825375",
                "232017792627593060398550897781914560533",
                "273044645211350846033584871890401335473"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-63117-ce3f7d1f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/freerdp/freerdp/commit/b78fc0b138fe8f08a8b102e193ffb32986f4449a",
        "target": {
            "file": "channels/rdpsnd/server/rdpsnd_main.c"
        }
    }
]
vanir_signatures_modified 
"2026-09-11T08:36:38Z"