CVE-2026-23530

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWidth`/`nSrcHeight` against `planar->maxWidth`/`maxHeight` before RLE decode. A malicious server can trigger a client‑side heap buffer overflow, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.

• CWE-122
• CWE-122

• https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L1689-L1696Product
• https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L1713-L1716Product
• https://github.com/FreeRDP/FreeRDP/blob/38514dfa5813aa945a86cfbcec279033f8394468/libfreerdp/codec/planar.c#L951-L953Product
• https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0Release Notes
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r4hv-852m-fq7pExploit, Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2048
• https://access.redhat.com/errata/RHSA-2026:2081
• https://access.redhat.com/errata/RHSA-2026:2222
• https://access.redhat.com/errata/RHSA-2026:2714
• https://access.redhat.com/errata/RHSA-2026:2736
• https://access.redhat.com/errata/RHSA-2026:2770
• https://access.redhat.com/errata/RHSA-2026:2824
• https://access.redhat.com/errata/RHSA-2026:2952
• https://access.redhat.com/errata/RHSA-2026:3036
• https://access.redhat.com/errata/RHSA-2026:3037
• https://access.redhat.com/errata/RHSA-2026:3038
• https://access.redhat.com/errata/RHSA-2026:3039
• https://access.redhat.com/errata/RHSA-2026:3041
• https://access.redhat.com/security/cve/CVE-2026-23530
• https://bugzilla.redhat.com/show_bug.cgi?id=2430877
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23530.json

Published

Jan 19, 2026

Last Modified

Jul 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23524Laravel Reverb provides a real-time WebSocket communication …9.8
• CVE-2026-235251Panel is an open-source, web-based control panel for Linux …8.4
• CVE-2026-23526CVAT is an open source interactive video and image annotatio…8.8
• CVE-2026-23527H3 is a minimal H(TTP) framework built for high performance …9.8
• CVE-2026-23528Dask distributed is a distributed task scheduler for Dask. P…6.1
• CVE-2026-23529Kafka Connect BigQuery Connector is an implementation of a s…7.7
• CVE-2026-23531FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2026-23532FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2026-23533FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2026-23534FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2026-23535wlc is a Weblate command-line client using Weblate's REST AP…8
• CVE-2026-23536A security issue was discovered in the Feast Feature Server'…7.5