Heap Out-of-Bounds Read in rdesktop Affects Multiple Versions

CVE-2026-112277

What is CVE-2026-112277?

The rdesktop client, up to version 1.9.0, is susceptible to a heap out-of-bounds read vulnerability in the process_plane() function defined in bitmap.c. This flaw permits malicious Remote Desktop Protocol (RDP) servers to crash clients by sending specially crafted 32 bpp compressed bitmaps. By deliberately declaring large bitmap geometries alongside short compressed bodies in bitmap update PDUs or bitmap cache orders, attackers can exploit this vulnerability, triggering unbounded reads that exceed the limits of the buffer and ultimately resulting in denial of service.

References