Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-91963

FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when chained with memory corruption vulnerabilities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

Default version status: unaffected

  • 2.0.0 to < 3.0.0affected
  • 3.0.0 to < 3.31.0affected
  • 3.31.0unaffected

FreeRDP FreeRDP

Default version status: unaffected

  • 0 to < 3.31.0affected
  • 3.31.0unaffected

References