CVE-2026-111381

7.3 HIGHpublic exploit available

Published 2026-10-16 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes mismatched entry size accounting and fixed 16 KiB reads, leading to crashes or code execution when loaded.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-122

Public exploit & PoC references

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6

All references

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6
https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-buffer-overflow-via-persistent-cache-v2-parser
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2016-15059PoC
CRITICALCVE-2017-20241
LOWCVE-2025-1218PoC
HIGHCVE-2026-100201
HIGHCVE-2026-100203
HIGHCVE-2026-100210
HIGHCVE-2026-100215
HIGHCVE-2026-100220

Related by shared AI tags and CWE weakness class. Browse the full archive.