Heap-based Out-of-Bounds Read in FreeRDP Affects Clipboard Functionality

CVE-2026-114043

What is CVE-2026-114043?

FreeRDP versions prior to 3.32.1 are vulnerable to a heap-based out-of-bounds read that affects the clipboard functionality. This vulnerability arises due to improper handling of low-bit-depth PNG images, where a carefully crafted payload from a malicious RDP server can lead to unauthorized disclosure of significant amounts of heap memory. Exploitation of this vulnerability can result in serious security implications for victims, particularly when sensitive data is exposed through clipboard actions.

References