SUSE-SU-2026:0762-1

CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall (bsc#1256721).
CVE-2026-22857: heap-use-after-free in irpthreadfunc (bsc#1256723).
CVE-2026-23533: improper validation can lead to heap buffer overflow in clear_decompress_residual_data (bsc#1256943).
CVE-2026-23732: improper validation can lead to heap buffer overflow in Glyph_Alloc (bsc#1256945).
CVE-2026-23884: use-after-free in gdi_set_bounds (bsc#1256947).
CVE-2026-24491: heap-use-after-free in video_timer (bsc#1257981).
CVE-2026-24675: heap-use-after-free in urbselectinterface (bsc#1257982).
CVE-2026-24676: heap-use-after-free in audioformatcompatible (bsc#1257983).
CVE-2026-24679: heap-buffer-overflow in urbselectinterface (bsc#1257986).
CVE-2026-24682: heap-buffer-overflow in audioformatsfree (bsc#1257989).
CVE-2026-24684: heap-use-after-free in play_thread (bsc#1257991).

References

Affected packages

Name: freerdp
Purl: pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2-12.57.1

{
    "binaries": [
        {
            "freerdp-devel": "2.1.2-12.57.1",
            "winpr2-devel": "2.1.2-12.57.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0762-1.json"

Name: freerdp
Purl: pkg:rpm/suse/freerdp&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2-12.57.1

{
    "binaries": [
        {
            "freerdp-devel": "2.1.2-12.57.1",
            "winpr2-devel": "2.1.2-12.57.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0762-1.json"