CVE-2026-27951: FreeRDP has possible Integer overflow in Stream_EnsureCapacity
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems where the available physical memory is >= SIZEMAX. Version 3.23.0 contains a patch. No known workarounds are available.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27951?
CVE-2026-27951 has been classified as a high severity vulnerability due to its potential to create an endless blocking loop.
How do I fix CVE-2026-27951?
To fix CVE-2026-27951, you should upgrade FreeRDP to version 3.23.0 or later.
What versions of FreeRDP are affected by CVE-2026-27951?
CVE-2026-27951 affects all FreeRDP versions prior to 3.23.0.
On which systems can CVE-2026-27951 be practically exploited?
CVE-2026-27951 can be practically exploited on 32-bit systems.
What functionality is compromised by CVE-2026-27951?
The functionality compromised by CVE-2026-27951 is the `Stream_EnsureCapacity` which can lead to an endless blocking loop.