Beveiligingsadvies

CVE-2026-91948

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:18:06

Laatst bijgewerkt 2026-09-15 16:03:29

Toegewezen door VulnCheck

CVSS-score 7.7

Status PUBLISHED

Beschrijving

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live pointers, potentially enabling code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗