Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-109938

FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update

Description

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

Default version status: unaffected

  • 3.11.0 to < 3.32.0affected
  • 3.32.0unaffected

References