{"id":"CVE-2026-114041","kind":"vulnerability","aliases":["CVE-2026-114041"],"related":[],"title":"FreeRDP on Windows: malicious gateway triggers heap over-read, leaks memory","description":"FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size, leaking heap memory or crashing.","summary":"FreeRDP before 3.32.1 on Windows reads past a heap buffer in client_cli_present_gateway_message because a byte count is passed as a wide-character printf precision. A malicious RD Gateway can send crafted consent or service messages to make the client read about twice the buffer size, leaking heap memory or crashing.","severity":"medium","cvss":6.9,"epss":0.00323,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["freerdp","package","rd-gateway","remote-desktop","windows"],"not_affected_if":["no-rd-gateway","non-windows-client"],"how_to_check":"- Run `xfreerdp /version` or check the installed FreeRDP version on Windows clients; the sources do not give a shell command for every install path\n- Check whether the installed build is older than `3.32.1`","fix":"- Upgrade FreeRDP to `3.32.1` or later on Windows clients\n- Rebuild or repackage any application that bundles FreeRDP","status":"open","published_at":"2026-10-21T01:17:26+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:40:17+00:00","updated_at":"2026-10-25T03:40:17+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T03:40:17Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade FreeRDP to `3.32.1` or later on Windows clients\n- Rebuild or repackage any application that bundles FreeRDP","reach":"network","title":"FreeRDP on Windows: malicious gateway triggers heap over-read, leaks memory","impact":"low","summary":"FreeRDP before 3.32.1 on Windows reads past a heap buffer in client_cli_present_gateway_message because a byte count is passed as a wide-character printf precision. A malicious RD Gateway can send crafted consent or service messages to make the client read about twice the buffer size, leaking heap memory or crashing.","category":"package","nicknames":[],"who_cares":["freerdp","windows","rd-gateway","remote-desktop"],"confidence":0.7,"needs_auth":"no","worst_case":"Heap memory leaks or the client crashes during gateway connection.","analyst_note":"","how_to_check":"- Run `xfreerdp /version` or check the installed FreeRDP version on Windows clients; the sources do not give a shell command for every install path\n- Check whether the installed build is older than `3.32.1`","needs_analyst":false,"not_affected_if":["no-rd-gateway","non-windows-client"],"who_is_affected":"Windows clients built on FreeRDP before `3.32.1` that connect through an RD Gateway, which is the path that delivers the attacker-controlled messages. Teams that only run FreeRDP on Linux or macOS, or that do not use RD Gateway, are not described as exposed by the sources. Vendors who ship FreeRDP inside their own Windows client should check their bundled version.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000637,"input_tokens":3378,"output_tokens":598,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114041':15A,18A '-2026':14A,17A '3.32.1':30B,85C 'authent':121C 'bound':94C 'buffer':37B,76B,133C 'byte':46B,105C 'caus':126C 'charact':54B,110C 'cli':40B,98C 'client':39B,71B,97C,128C 'consent':64B,122C 'contain':88C 'count':47B,106C 'craft':63B 'crash':82B,139C 'cve':13A,16A 'desktop':26B 'freerdp':1A,19B,28B,83C 'gateway':5A,23B,42B,60B,100C,116C 'heap':7A,36B,79B,90C,136C 'leak':11A,78B,135C 'make':69B 'malici':4A,58B,114C 'memori':12A,80B,137C 'messag':43B,67B,101C,125C 'out-of-bound':91C 'over-read':8A 'packag':20B 'pass':49B,103C 'past':34B 'pre':120C 'pre-authent':119C 'precis':56B,112C 'present':41B,99C 'printf':55B,111C 'rd':22B,59B,115C 'rd-gateway':21B 'read':10A,33B,72B,95C,130C 'remot':25B 'remote-desktop':24B 'send':62B,118C 'servic':66B,124C 'size':77B,134C 'trigger':6A 'twice':74B,131C 'wide':53B,109C 'wide-charact':52B,108C 'window':3A,27B,32B,87C","nicknames":[],"mitigations":[],"who_affected":"Windows clients built on FreeRDP before `3.32.1` that connect through an RD Gateway, which is the path that delivers the attacker-controlled messages. Teams that only run FreeRDP on Linux or macOS, or that do not use RD Gateway, are not described as exposed by the sources. Vendors who ship FreeRDP inside their own Windows client should check their bundled version.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114041","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114041","severity":null,"published_at":"2026-10-21T01:17:26+00:00","modified_at":"2026-10-22T15:44:59+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114041","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114041","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}