Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-109950 Details

Description

FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages, causing UTF-8 conversion to read past the stream allocation and disrupt client availability.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:4.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v CISA-ADPExploitVendor Advisory
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v [email protected]ExploitVendor Advisory
https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-heap-out-of-bounds-read-via-rd-gateway-messages [email protected]Third Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-125Out-of-bounds Read[email protected]

Affected Products

ProductVersions
freerdp freerdp
>= 3.0.0, < 3.32.0

CPE

  • cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-109950
NVD Published Date:
Oct 13, 2026
NVD Last Modified:
Oct 21, 2026
Source:
[email protected]
CVE-2026-109950 Details - Not Deferred