PT-2026-57293 · Freerdp · Freerdp

Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-57156

NVD

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update read delta points in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeof(DELTA POINT), allowing a malicious RDP peer to allocate an undersized heap buffer and then write beyond it during initialization. This issue is fixed in version 3.28.0.

Correção

Heap Based Buffer Overflow

Integer Overflow

Enumeração de Fraquezas

CWE-122

CWE-190

Identificadores relacionados

CVE-2026-57156

Produtos afetados

Freerdp

Referências · 5

• https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0 · Nota
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v5wf-j8j4-77h7 · Nota
• https://github.com/FreeRDP/FreeRDP/pull/12938 · Nota
• https://github.com/FreeRDP/FreeRDP/commit/487f35daccb36a6224e530dcd8fa60850825f823 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-57156 · Nota de Segurança