CVE-2026-41252 Details
Description
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1.
A heap-based buffer overflow vulnerability has been identified in xrdp, an open-source RDP server, in versions through 0.10.6. The issue arises from a missing bounds check when the software operates in VNC-any mode. During the processing of RFB protocol color map messages from a VNC server, the application fails to properly validate incoming color indices. This oversight allows a malicious VNC server to exploit the vulnerability by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. Such memory corruption can cause a denial-of-service condition or, potentially, allow remote code execution prior to authentication.
Users can upgrade to xrdp version 0.10.6.1 to address this vulnerability. For environments where this version cannot be applied, remove or comment out the '[vnc-any]' section from 'xrdp.ini' and ensure that any other custom sections allowing connections to arbitrary VNC hosts are disabled or removed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 | [email protected] | Release Notes |
| https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-w5vg-6qmv-j63j | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| neutrinolabs xrdp | < 0.10.6.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Modified | CISA-ADP |
| Jul 22, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | CISA-ADP |
| Jul 20, 2026 | New CVE Received | [email protected] |