CVE record · 1 source
CVE-2026-109242
CVSS 7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is…
- Vendor
- Microsoft
- Product
- Remote Desktop
- CVSS
- 7.1
- EPSS
- 0.003 (p22)
- Exposure class
- Remote access
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is…
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted…