CVE-2026-33983
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In FreeRDP before version 3.24.2, a vulnerability in progressive_decompress_tile_upgrade() does not halt execution after detecting a mismatch, only logging a warning. Using a wrapped value (247) as a shift exponent causes undefined behavior and an approximately 80 billion iteration loop, resulting in CPU denial of service (DoS).
Risk Assessment
An attacker can remotely cause CPU exhaustion on FreeRDP servers or clients, leading to service unavailability. The vulnerability may be exploitable without authentication, increasing risk for organizations using FreeRDP for remote access.
Recommendation
Immediately update FreeRDP to version 3.24.2 or later. If updating is not possible, consider temporarily disabling progressive decompression in the configuration.
Original NVD description (English source)
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is used as a shift exponent, causing undefined behavior and an approximately 80 billion iteration loop (CPU DoS). This issue has been patched in version 3.24.2.