CVE-2026-57156
Vulnerability Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update_read_delta_points in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeof(DELTA_POINT), allowing a malicious RDP peer to allocate an undersized heap buffer and then write beyond it during initialization. This issue is fixed in version 3.28.0.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-122
Source
NVD
Vendor
FreeRDP
Product
FreeRDP
Discussion (0)
Add Comment
No comments yet. Be the first!