📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h Global data_breach Software/SaaS CRITICAL 1h Global vulnerability Technology / Web Services HIGH 3h Global vulnerability Consumer Electronics / Technology CRITICAL 5h Global ransomware Enterprise / All Sectors CRITICAL 5h Global data_breach Government CRITICAL 7h Global malware Multiple sectors / General public HIGH 7h Global vulnerability Technology and Software Development CRITICAL 8h Global malware,vulnerability,apt Technology, Cloud Services, Consumer Electronics HIGH 8h Global malware Web Hosting and Content Management HIGH 8h Global vulnerability Information Technology and Network Infrastructure CRITICAL 9h
Vulnerabilities

CVE-2026-33977

Medium ⚡ Exploit Available
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid
CWE-617 — Weakness Type
Published: Mar 30, 2026  ·  Modified: Apr 2, 2026  ·  Source: NVD
CVSS v3
6.5
🔗 NVD Official
📄 Description (English)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value (>= 89). The unvalidated step index is read directly from the network and used to index into a 89-entry lookup table, triggering a WINPR_ASSERT() failure and process abort via SIGABRT. This affects any FreeRDP client that has audio redirection (RDPSND) enabled, which is the default configuration. This issue has been patched in version 3.24.2.

🤖 AI Executive Summary

FreeRDP clients prior to version 3.24.2 are vulnerable to denial of service attacks when malicious RDP servers send audio data with invalid IMA ADPCM step index values, causing client crashes. The vulnerability affects default configurations with audio redirection enabled and can be exploited by attackers controlling RDP servers.

📄 Description (Arabic)

تحتوي هذه الثغرة على فشل في التحقق من صحة فهرس الخطوة الأولية في بيانات صوت IMA ADPCM المستقبلة من خادم RDP. عندما يرسل خادم RDP ضار قيمة فهرس خطوة >= 89، يحدث وصول خارج الحدود إلى جدول البحث الذي يحتوي على 89 إدخالاً فقط. يؤدي هذا إلى فشل التأكيد وإجهاض العملية عبر SIGABRT.

🤖 ملخص تنفيذي (AI)

عملاء FreeRDP السابقة للإصدار 3.24.2 عرضة لهجمات رفض الخدمة عندما تُرسل خوادم RDP الضارة بيانات صوتية بقيم فهرس خطوة IMA ADPCM غير صحيحة، مما يسبب انهيار العميل. تؤثر الثغرة على التكوينات الافتراضية مع تفعيل إعادة توجيه الصوت ويمكن استغلالها من قبل المهاجمين الذين يتحكمون في خوادم RDP.

🤖 AI Intelligence Analysis Analyzed: May 12, 2026 21:37
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
government banking telecom healthcare
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
6.0
/ 10.0
🔧 Remediation Steps (English)
Upgrade FreeRDP to version 3.24.2 or later immediately. For organizations unable to upgrade immediately, disable audio redirection (RDPSND) in RDP client configurations and restrict RDP connections to trusted servers only. Monitor for unexpected RDP client crashes and implement network segmentation to limit RDP server access.
🔧 خطوات المعالجة (العربية)
قم بترقية FreeRDP إلى الإصدار 3.24.2 أو أحدث فوراً. للمنظمات غير القادرة على الترقية فوراً، قم بتعطيل إعادة توجيه الصوت (RDPSND) في تكوينات عميل RDP وقيد اتصالات RDP بخوادم موثوقة فقط. راقب انهيارات عميل RDP غير المتوقعة وطبق تقسيم الشبكة لتحديد الوصول إلى خادم RDP.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
ECC-5.1 ECC-5.2 ECC-6.1
🔵 SAMA CSF
ID.BE-5.1 PR.DS-2.1 DE.CM-1.1
🟡 ISO 27001:2022
A.12.6.1 A.14.2.1 A.14.2.5
📦 Affected Products / CPE 1 entries
freerdp:freerdp
📊 CVSS Score
6.5
/ 10.0 — Medium
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredN — None / Network
User InteractionR — Required
ScopeU — Unchanged
ConfidentialityN — None / Network
IntegrityN — None / Network
AvailabilityH — High
📋 Quick Facts
Severity Medium
CVSS Score6.5
CWECWE-617
EPSS0.04%
Exploit ✓ Yes
Patch ✓ Yes
Published 2026-03-30
Source Feed nvd
Views 4
🇸🇦 Saudi Risk Score
6.0
/ 10.0 — Saudi Risk
Priority: MEDIUM
🏷️ Tags
exploit-available patch-available CWE-617
Share this CVE

💬 Comments

0
Loading comments
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.