PT-2026-3460 · Freerdp+3 · Freerdp+3
Ehdgks0627
·
Published
2026-01-01
·
Updated
2026-04-07
·
CVE-2026-23732
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.21.0
Description
The issue is a buffer overflow in the
Glyph Alloc() function of the FreeRDP Remote Desktop Protocol client. The FastGlyph parsing component trusts the cbData/remaining length and does not validate it against the minimum size implied by cx/cy. A remote attacker can exploit this to trigger a client-side global buffer overflow, leading to a denial-of-service (DoS) condition. The vulnerability resides in how the client handles data during FastGlyph parsing. The vulnerable parameter is cbData.Recommendations
Versions prior to 3.21.0 should be updated to version 3.21.0 or later.
Exploit
Fix
DoS
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp
Linuxmint
Rocky Linux
Ubuntu