CVE-2026-55193

FreeRDP: Mehrere Schwachstellen

Open Source FreeRDP, Oracle Linux, Red Hat Enterprise Linux, RESF Rocky Linux

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core/gateway/rpc_bind.c without bounding it to the 4088-byte ReceiveFragment allocation. A malicious gateway can advertise 65535 and then send a response fragment of the same length, causing rpc_channel_read in libfreerdp/core/gateway/rpc.c to write up to 65535 bytes into the smaller ReceiveFragment…

19. Aug 2026

Ausgewertete Quellen

• CERT-Bund
  WID-SEC-2026-1933
• NVD
  CVE-2026-55193
• GitHub
  https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7rp4-66mc-j9vx