Heap Out-of-Bounds Write Vulnerability in FreeRDP by FreeRDP

CVE-2026-109680

What is CVE-2026-109680?

FreeRDP versions prior to 3.32.0 are susceptible to a heap-based out-of-bounds write vulnerability. This occurs in the function freerdp_interruptible_get_line, where the buffer size is erroneously set to only 32 bytes. Meanwhile, a malicious or compromised ARM routing service could provide a lengthy redirected username that overflows the buffer, potentially causing a crash during user input at the CLI credential prompt. This vulnerability underscores the importance of validating inputs and maintaining proper buffer sizes to prevent exploitation.

References