Heap Buffer Overflow in FreeRDP Affects Remote Desktop Protocol Services
CVE-2026-109256

6MEDIUM

Key Information:

Vendor

Freerdp

Status
Freerdp
Vendor
CVE Published:
12 October 2026

What is CVE-2026-109256?

A heap buffer overflow vulnerability exists in FreeRDP versions 3.10.0 through 3.32.2, specifically within the WinPR png_write_data callback. This flaw allows a malicious remote desktop protocol (RDP) clipboard peer to send a specially crafted large CF_DIB image, which may result in an out-of-bounds memory copy operation during the PNG conversion process. Such exploitation can lead to unexpected client behavior or crashes, compromising the integrity and availability of services relying on FreeRDP.

Affected Version(s)

FreeRDP 3.10.0 <= 3.32.2

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/freerdp-3.10.0-throu...
third-party-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

kimaiden1984-boop
.