CVE-2026-111381CWE-122

CVE-2026-111381

High · published October 16, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes mismatched entry size accounting and fixed 16 KiB reads, leading to crashes or code execution when loaded.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
7.0 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00131 · 2.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-10-16T07:18Z
Affected products (1)
ProductVersionsFixed in
freerdp/freerdp< 3.32.03.32.0
References (3)
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6 · [email protected]https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-buffer-overflow-via-persistent-cache-v2-parser · [email protected]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 16 OCT 01:17Z
    FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
    cvelistv5
  • 16 OCT 01:17Z
    FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser
    cvelistv5