CVE-2026-114043: Vulnerability in FreeRDP

Q: Who is exposed to this issue?

FreeRDP clients before 3.32.1 are exposed when they connect to a malicious RDP server that can provide clipboard content. Exploitation requires the victim to paste the crafted PNG clipboard payload.

Q: What does an attacker need to exploit it?

An attacker needs to operate or control an RDP server that the victim connects to and send a crafted low-bit-depth PNG through the clipboard channel. No attacker authentication or local privileges are indicated, but victim interaction is required.

Q: What is the impact of successful exploitation?

Successful exploitation can disclose megabytes of heap memory from the FreeRDP client. The provided information does not indicate integrity or availability impact.

Q: How can this be remediated?

Upgrade FreeRDP to version 3.32.1 or later. The affected versions are those before 3.32.1.

Published Oct 21, 2026

Updated

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CFDIB synthesis because winprreadpngfrombuffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winprbitmapwritebuffer() copies rows assuming one byte per pixel. A malicious RDP server can send a crafted low-bit-depth PNG clipboard payload that, when pasted by the victim, discloses megabytes of heap memory.

Affected Software

1 affected component

FreeRDP freerdp<3.32.1

Event History

Oct 21, 2026

CVE Published

via MITRE·12:36 AM

Data Sourced

via MITRE·12:36 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

FreeRDP clients before 3.32.1 are exposed when they connect to a malicious RDP server that can provide clipboard content. Exploitation requires the victim to paste the crafted PNG clipboard payload.

What does an attacker need to exploit it?

An attacker needs to operate or control an RDP server that the victim connects to and send a crafted low-bit-depth PNG through the clipboard channel. No attacker authentication or local privileges are indicated, but victim interaction is required.

What is the impact of successful exploitation?

Successful exploitation can disclose megabytes of heap memory from the FreeRDP client. The provided information does not indicate integrity or availability impact.

How can this be remediated?

Upgrade FreeRDP to version 3.32.1 or later. The affected versions are those before 3.32.1.

CVE-2026-114043: Vulnerability in FreeRDP

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

How can this be remediated?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

How can this be remediated?