Heap-Based Out-of-Bounds Write in FreeRDP Affected by Grayscale JPEG Clipboard Data

CVE-2026-110839

What is CVE-2026-110839?

The vulnerability in FreeRDP involves a heap-based out-of-bounds write when processing grayscale JPEG images through clipboard redirection. Specifically, when FreeRDP is built with the WINPR_UTILS_IMAGE_JPEG option enabled, an attacker can exploit this flaw by sending malformed grayscale JPEG data from an RDP server. This leads to improper memory allocation based on a single input component, introducing the possibility of client memory corruption and subsequent crashes during CF_DIB bitmap data pasting operations.

References