{"id":"CVE-2026-111382","kind":"vulnerability","aliases":["CVE-2026-111382"],"related":[],"title":"FreeRDP: malicious server frames corrupt client heap, enabling code execution","description":"FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface height to write past U/V planes, enabling heap corruption and potential code execution.","summary":"FreeRDP clients up to 3.31.1 write one row past the heap U/V planes in general_LumaToYUV444 and general_ChromaV2ToYUV444. This happens when a malicious RDP server sends an RDPGFX AVC444 or AVC444v2 frame whose region rect has an odd height and ends at the surface height. It corrupts client heap memory and can lead to code execution as the connecting user. The user has to connect to the hostile or compromised server. Fixed in 3.32.0.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"freerdp","fixed":["3.32.0"],"affected":"< 3.32.0","ecosystem":"vendor"},{"name":"freerdp","fixed":["3.32.0"],"affected":"<= 3.31.1 (< 3.32.0)","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["client-side","freerdp","linux","package","rdp-clients","windows"],"not_affected_if":["fixed-version","no-outbound-rdp","no-rdp-connections-to-untrusted-servers","patched-3.32.0","trusted-servers-only"],"how_to_check":"Run xfreerdp /version (or wlfreerdp, sdl-freerdp). Anything below 3.32.0 is affected, and so are apps that bundle libfreerdp. On Debian or Ubuntu run dpkg -l 'freerdp*' or 'libfreerdp*'. On RPM distros run rpm -q freerdp. Clients with no H.264/AVC support built in, or that never connect to untrusted servers, are less exposed. I did not confirm the default AVC444 setting.","fix":"Upgrade FreeRDP to 3.32.0 or later. Ubuntu 24.04: freerdp3 3.32.0+dfsg-0ubuntu0.24.04.1. Debian: forky/sid fixed in freerdp3 3.32.0+dfsg-1 (sid now 3.32.2+dfsg-1); trixie (3.15.0+dfsg-2.1+deb13u3) and bookworm freerdp2 (2.11.7) still listed vulnerable. Until patched, only connect to trusted servers; disabling AVC444 (e.g. /gfx:AVC420 or -gfx-h264) is a possible workaround, which I did not verify in a source.","status":"open","published_at":"2026-10-16T03:18:05+00:00","first_seen_at":"2026-10-23T21:57:12+00:00","triaged_at":"2026-10-23T22:34:55+00:00","updated_at":"2026-10-24T00:29:00+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-23T22:34:55Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade FreeRDP to 3.32.0 or later.","reach":"network","title":"FreeRDP: malicious server frames corrupt client heap, enabling code execution","impact":"high","summary":"FreeRDP clients before 3.32.0 can be made to write past heap buffers when a malicious RDP server sends crafted AVC444 or AVC444v2 graphics frames. An attacker controlling the server can corrupt client memory and may run code on the connecting machine.","category":"package","who_cares":["freerdp","rdp-clients","windows","linux"],"confidence":0.7,"needs_auth":"no","worst_case":"Malicious server corrupts client heap and may execute code there.","analyst_note":"Confirm whether AVC444 graphics mode is on by default in shipped FreeRDP clients and which distro packages carry the fix; source is NVD only.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["fixed-version","no-rdp-connections-to-untrusted-servers"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000497,"input_tokens":2996,"output_tokens":394,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm whether AVC444 graphics mode is on by default in shipped FreeRDP clients and which distro packages carry the fix; source is NVD only.","search":"'-111382':13A,16A '-2026':12A,15A '3.31.1':33B '3.32.0':103B,106C 'allow':126C 'attack':134C 'avc444':58B,138C 'avc444v2':60B,140C 'bound':116C 'chromav2toyuv444':47B,124C 'client':6A,20B,27B,30B,77B,110C,132C 'client-sid':19B,109C 'code':9A,84B,162C 'compromis':99B 'connect':88B,94B 'contain':107C 'corrupt':5A,76B,131C,159C 'cve':11A,14A 'enabl':8A,157C 'end':70B,148C 'execut':10A,85B,163C 'fix':101B 'frame':4A,61B,141C 'freerdp':1A,17A,18A,22B,29B,104C 'general':43B,46B,120C,123C 'happen':49B 'heap':7A,39B,78B,112C,158C 'height':68B,74B,145C,151C 'hostil':97B 'lead':82B 'linux':23B 'lumatoyuv444':44B,121C 'malici':2A,52B,127C 'memori':79B,133C 'odd':67B,144C 'odd-height':143C 'one':35B 'out-of-bound':113C 'packag':24B 'past':37B,154C 'plane':41B,156C 'potenti':161C 'rdp':26B,53B,128C 'rdp-client':25B 'rdpgfx':57B,137C 'rect':64B,147C 'region':63B,146C 'row':36B 'send':55B,136C 'server':3A,54B,100B,129C 'side':21B,111C 'surfac':73B,150C 'u/v':40B,155C 'user':89B,91B 'vulner':118C 'whose':62B 'window':28B 'write':34B,117C,153C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T03:18:05+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111382","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111382","severity":null,"published_at":"2026-10-16T03:18:05+00:00","modified_at":"2026-10-20T15:33:45+00:00","first_seen_at":"2026-10-23T21:57:12+00:00","fetched_at":"2026-10-23T22:28:54+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-111382:671","url":null,"severity":null,"published_at":"2026-10-24T00:29:00+00:00","modified_at":"2026-10-24T00:29:00+00:00","first_seen_at":"2026-10-24T00:29:00+00:00","fetched_at":"2026-10-24T00:29:00+00:00","note":"Read maintainer GHSA-f4pf-pgp4-f2r3 (fixed 3.32.0, affects <=3.31.1), Debian tracker, Red Hat, Snyk/Ubuntu. Not exploited as far as sources say; PoC is only described in the advisory (malicious server CreateSurface 64x16 + AVC444 rect {0,1,64,16}), no public exploit code found; no X conversation. Whether AVC444 is on by default in clients NOT confirmed: advisory says all H.264 backends are affected but not the default setting."}],"documents":[{"id":2632,"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f4pf-pgp4-f2r3","title":"GHSA-f4pf-pgp4-f2r3 FreeRDP AVC444 heap OOB write","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":2633,"url":"https://security-tracker.debian.org/tracker/CVE-2026-111382","title":"Debian tracker CVE-2026-111382","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":2634,"url":"https://access.redhat.com/security/cve/cve-2026-111382","title":"Red Hat CVE-2026-111382","kind":"vendor","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":2635,"url":"https://security.snyk.io/vuln/SNYK-UBUNTU2404-FREERDP3-21010300","title":"Snyk/Ubuntu 24.04 freerdp3 fix","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}