FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied DeviceName and VirtualChannelName fields for a NUL terminator in channels/rdpecam/server/camera_device_enumerator_main.c and then dereference once past the scan bound, allowing a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. This issue is fixed in version 3.28.0.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP
    clients contain an integer overflow in update_read_delta_points in libfreerdp/core/orders.c when
    multiplying an attacker-controlled point count by sizeof(DELTA_POINT), allowing a malicious RDP peer to
    allocate an undersized heap buffer and then write beyond it during initialization. This issue is fixed in
    version 3.28.0. (CVE-2026-57156)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server
    implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied
    DeviceName and VirtualChannelName fields for a NUL terminator in
    channels/rdpecam/server/camera_device_enumerator_main.c and then dereference once past the scan bound,
    allowing a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. This issue is fixed in
    version 3.28.0. (CVE-2026-57157)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP
    clients using the GFX pipeline contain an incomplete fix for CVE-2026-23530 in
    planar_decompress_plane_rle_only in libfreerdp/codec/planar.c, allowing a malicious RDP server to send a
    truncated RDPGFX_CMDID_WIRETOSURFACE_1 planar payload that reads one byte past the input buffer. This
    issue is fixed in version 3.28.0. (CVE-2026-57158)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-931f893f1b advisory.

    Update to 3.28.0

    It fixes CVE-2026-57156, CVE-2026-57157 and CVE-2026-57158.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e2afc3151d advisory.

    Update to 3.28.0

    It fixes CVE-2026-57156, CVE-2026-57157 and CVE-2026-57158.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server     implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied     DeviceName and VirtualChannelName fields for a NUL terminator in     channels/rdpecam/server/camera_device_enumerator_main.c and then dereference once past the scan bound,     allowing a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. This issue is fixed in     version 3.28.0. (CVE-2026-57157)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
444730	Alpine: multiple freerdp packages: security update to 3.29.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
444730	Alpine: multiple freerdp packages: security update to 3.29.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
326976	Fedora 44 : freerdp (2026-931f893f1b)	Nessus	Fedora Local Security Checks	high
326918	Fedora 43 : freerdp (2026-e2afc3151d)	Nessus	Fedora Local Security Checks	high
325546	Linux Distros Unpatched Vulnerability : CVE-2026-57157	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-57157

medium

Tenable Plugins

high

high

high

high

medium