A vulnerability, which was classified as critical, has been found in FreeRDP up to 3.20.x. Impacted is an unknown function of the component RDPGFX ClearCodec Decode. This manipulation causes heap-based buffer overflow.
This vulnerability is tracked as CVE-2026-23533. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
