Hoch 7.5Software
CVE-2026-55648
FreeRDP: Mehrere Schwachstellen
Open Source FreeRDP, Oracle Linux, Red Hat Enterprise Linux, RESF Rocky Linux
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_image_copy_from_icon_data in libfreerdp/codec/color.c calculates nWidth multiplied by nHeight multiplied by FreeRDPGetBytesPerPixel(format) in 32-bit arithmetic. A malicious RDP server can send a RAIL TS_ICON_INFO update with dimensions such as 32768 by 32768 and 32 bits per pixel so the required-size calculation wraps, bypassing the cbBitsColor source bounds check before…
19. Aug 2026
Original bei CERT-Bund öffnen