CVE-2026-27950 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-27950 Interim 1 1 2026-03-05T00:14:56Z current 2026-03-05T00:14:56Z 2026-03-05T00:14:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-27950 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 freerdp freerdp-devel freerdp-proxy freerdp-proxy-plugins freerdp-sdl freerdp-server freerdp-wayland freerdp2 freerdp2-devel freerdp2-proxy freerdp2-server libfreerdp-server-proxy3-3 libfreerdp2 libfreerdp2-2 libfreerdp3-3 librdtk0-0 libuwac0-0 libwinpr2 libwinpr2-2 libwinpr3-3 uwac0-0-devel winpr-devel winpr2-devel freerdp as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-proxy as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-server as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-wayland as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libfreerdp2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libuwac0-0 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libwinpr2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 uwac0-0-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 winpr2-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS winpr2-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS freerdp as a component of SUSE Linux Enterprise Server 12 SP5-LTSS freerdp as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security freerdp as a component of SUSE Linux Enterprise Server 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server 16.0 freerdp-server as a component of SUSE Linux Enterprise Server 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server 16.0 winpr-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-server as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 winpr-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-sdl as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-server as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp3-3 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 librdtk0-0 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr3-3 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-proxy as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-server as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp2-2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr2-2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr2-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp as a component of openSUSE Leap 15.6 freerdp-devel as a component of openSUSE Leap 15.6 freerdp-proxy as a component of openSUSE Leap 15.6 freerdp-server as a component of openSUSE Leap 15.6 freerdp-wayland as a component of openSUSE Leap 15.6 libfreerdp2-2 as a component of openSUSE Leap 15.6 libuwac0-0 as a component of openSUSE Leap 15.6 libwinpr2-2 as a component of openSUSE Leap 15.6 uwac0-0-devel as a component of openSUSE Leap 15.6 winpr-devel as a component of openSUSE Leap 15.6 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0. CVE-2026-27950 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp2 SUSE Linux Enterprise Module for Package Hub 15 SP7:libfreerdp2 SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0 SUSE Linux Enterprise Module for Package Hub 15 SP7:libwinpr2 SUSE Linux Enterprise Module for Package Hub 15 SP7:uwac0-0-devel SUSE Linux Enterprise Module for Package Hub 15 SP7:winpr2-devel SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:freerdp SUSE Linux Enterprise Server 12 SP5-LTSS:freerdp SUSE Linux Enterprise Server 12 SP5-LTSS:freerdp-devel SUSE Linux Enterprise Server 12 SP5-LTSS:winpr2-devel SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-devel SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-proxy SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-server SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp2-2 SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr2-2 SUSE Linux Enterprise Workstation Extension 15 SP7:winpr2-devel openSUSE Leap 15.6:freerdp openSUSE Leap 15.6:freerdp-devel openSUSE Leap 15.6:freerdp-proxy openSUSE Leap 15.6:freerdp-server openSUSE Leap 15.6:freerdp-wayland openSUSE Leap 15.6:libfreerdp2-2 openSUSE Leap 15.6:libuwac0-0 openSUSE Leap 15.6:libwinpr2-2 openSUSE Leap 15.6:uwac0-0-devel openSUSE Leap 15.6:winpr-devel moderate 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L