Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-111382: FreeRDP client can be corrupted by malicious RDP server
CVE-2026-111382 · published 1 day ago
Summary
The FreeRDP program used to connect to remote Windows desktops can have its memory overwritten when it receives specially crafted video data from a malicious server. This could let an attacker cause the client to behave unpredictably or run unwanted code. Update FreeRDP to version 3.32.0 or later, or apply any available patches, to stop the risk.
What to do
- Update freerdp freerdp to version 3.32.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| freerdp | freerdp | < 3.32.0 |
Original advisory text
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface height to write past U/V planes, enabling heap corruption and potential code execution.
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f4pf-pgp4-f2r3 Vendor Advisory
- https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-out-of-bounds-wr... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-1113... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-111382 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.9
Critical
Type
CWE-787Out-of-bounds Write
Timeline
Published16 Oct 2026
Updated17 Oct 2026
First seen16 Oct 2026
Sources
CVE-2026-111382 · NVD
CVE-2026-111382 · MITRE
CVE-2026-111382 · OSV
GHSA-f4pf-pgp4-f2r3 · GHSA
Track software like this
Free during beta