CVE record · 1 source
CVE-2026-110839
CVSS 7.1FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because…
- Vendor
- Microsoft
- Product
- Remote Desktop
- CVSS
- 7.1
- EPSS
- 0.003 (p20)
- Exposure class
- Remote access
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because…
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers are sized from one input component rather than three BGR…