Remote Desktop Protocol Vulnerability in FreeRDP Affects Various Clients
CVE-2026-55648

6.1MEDIUM

Key Information:

Vendor: Freerdp
Status: Freerdp
Vendor: CVE Published:; 19 August 2026

What is CVE-2026-55648?

A critical vulnerability in FreeRDP allows for improper handling of icon data due to a calculation overflow, caused by malicious RDP servers sending oversized RAIL TS_ICON_INFO updates. This can potentially lead to remote code execution when the icon data is read without proper bounds checking. Clients using affected versions, specifically those prior to version 3.27.0, are at risk if they utilize the vulnerable code paths. This issue has been rectified in the release of version 3.27.0, highlighting the importance of updating to secure against this threat.