Heap Out-of-Bounds Write Vulnerability in FreeRDP by FreeRDP

CVE-2026-121954

What is CVE-2026-121954?

FreeRDP versions prior to 3.32.2 are susceptible to a heap out-of-bounds write vulnerability in the planar codec. This issue arises when freerdp_bitmap_planar_context_reset attempts to commit new dimensions before successfully reallocating the necessary buffer. In scenarios where a malicious RDP server sends an oversized ResetGraphics Protocol Data Unit (PDU) followed by a Graphics (GFX) PLANAR command, the client’s heap memory can be corrupted, leading to crashes and potential exploitation.

References