Skip to content

CVE record · 1 source

CVE-2026-111881

CVSS 7.6

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to…

Vendor: Microsoft
Product: Remote Desktop
CVSS: 7.6
EPSS: 0.002 (p16)
Exposure class: Remote access

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 14d ago

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to…

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RDP clipboard peer can return a…

CVSS 7.6 CVE-2026-111881 Microsoft