Live › vulnerability › CVE-2026-111381
Go to dashboardFreeRDP before 3.32.0 has a heap buffer overflow in persistent_cache_read_entry_v2 caused by integer wraparound in a bitmap size calculation. A local attacker who supplies a crafted persistent cache v2 file can corrupt heap memory, causing crashes or possibly code execution when the file is loaded.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems that have FreeRDP before 3.32.0 installed and that load persistent bitmap cache v2 files, which is the case for client-side use of FreeRDP. The sources describe a local attack that needs a malicious cache file to be loaded, so exposure is limited to machines where an attacker can place or swap that file. Hosts that do not run FreeRDP can skip this.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| freerdp | vendor | < 3.32.0 | 3.32.0 |
xfreerdp --version or freerdp --version and compare against 3.32.0dpkg -l | grep freerdp)3.32.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes mismatched entry size accounting and fixed 16 KiB reads, leading to crashes or code execution when loaded.
This page as .md · .json · in your agent: get_signal("CVE-2026-111381")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.