Out-of-Bounds Read and Write Vulnerability in FreeRDP's Kerberos Module

CVE-2026-73242

What is CVE-2026-73242?

FreeRDP, an open-source implementation of the Remote Desktop Protocol, contains a vulnerability in its Kerberos decryption method. In versions prior to 3.30.0, the kerberos_DecryptMessage function fails to properly validate the GSS Wrap-token EC field, resulting in potential out-of-bounds reads and in-place writes. This flaw could be exploited by a malicious RDP peer to manipulate memory, potentially leading to unauthorized access or other security breaches. The vulnerability has been resolved in version 3.30.0.

References