CVE-2022-39283: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in version 2.8.1. If you cannot upgrade do not use the `/video` switch.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Freerdp Freerdp: before 2.8.1 (fixed in 2.8.1)

Published 2022-10-12. Last modified 2026-06-17.