CVE-2026-111379

7.3High

Published 16 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash

7.3High

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required
Impact: Full C/I/A compromise
Weakness: CWE-122

Impact

A local attacker can achieve arbitrary code execution or crash the client by tricking a user into processing a malicious v3 persistent cache file. They need local access and user interaction to feed the crafted cache file to FreeRDP.

Root cause

An integer overflow when calculating allocation size from large width and height values in persist_cache_get_data causes fread to overflow an undersized heap buffer.

Affected systems

FreeRDP versions prior to 3.32.0

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade FreeRDP to version 3.32.0 or later. If upgrading immediately is not possible, disable or avoid opening untrusted persistent cache files.

shell

$ sudo apt-get update && sudo apt-get install --only-upgrade freerdp2-x11

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist_cache_get_data, causing fread to overflow an undersized buffer and potentially execute code.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111379