CVE-2026-25942CWE-125

FreeRDP has global-buffer-overflow in xf_rail_server_execute_result

Medium · published February 25, 2026

CVSS v4.0
5.5
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result` indexes the global `error_code_names[]` array (7 elements, indices 0–6) with an unchecked `execResult->execResult` value received from the server, allowing an out-of-bounds read when the server sends an `execResult` value of 7 or greater. Version 3.23.0 fixes the issue.

The record
Technical detail
CVSS v4.0
5.5 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00768 · 55.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-25T20:01Z
EPSS history
Timeline
  • 25 FEB 20:01Z
    FreeRDP has global-buffer-overflow in xf_rail_server_execute_result
    cvelistv5