CVE-2026-27951

MEDIUM5.3

FreeRDP has possible Integer overflow in Stream_EnsureCapacity

Published Feb 25, 2026

Modified 1 weeks ago

Details

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function Stream_EnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems where the available physical memory is >= SIZE_MAX. Version 3.23.0 contains a patch. No known workarounds are available.

References

WEB

https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113

WEB

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-27951

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector