Heap Buffer Overflow in FreeRDP Product by FreeRDP

CVE-2026-111381

What is CVE-2026-111381?

FreeRDP versions prior to 3.32.0 are susceptible to a heap buffer overflow vulnerability in the persistent_cache_read_entry_v2 function. This flaw allows local attackers to exploit integer wraparound during bitmap size calculations, leading to heap memory corruption. By crafting a persistent cache v2 file with oversized width and height values, attackers can trigger mismatched size accounting and cause fixed 16 KiB reads. This vulnerability may result in application crashes or potentially execute arbitrary code when the compromised data is processed.

References