CVE-2026-23732

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`. A malicious server can trigger a client‑side global buffer overflow, causing a crash (DoS). Version 3.21.0 contains a patch for the issue.

• CWE-122

• https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/cache/glyph.c#L463-L480Product
• https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/codec/color.c#L261-L277Product
• https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/core/graphics.c#L138Product
• https://github.com/FreeRDP/FreeRDP/blob/f96ee2a6dd02739325c2a4e36a14978b561f00ea/libfreerdp/core/orders.c#L2186C17-L2199Product
• https://github.com/FreeRDP/FreeRDP/releases/tag/3.21.0Release Notes
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qxp-j2fj-c3ppExploit, Vendor Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qxp-j2fj-c3ppExploit, Vendor Advisory

Published

Jan 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23727WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-23728WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-23729WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-2373The Royal Addons for Elementor – Addons and Templates Kit fo…5.3
• CVE-2026-23730WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-23731WeGIA is a web manager for charitable institutions. Prior to…4.3
• CVE-2026-23733LobeChat is an open source chat application platform. Prior …6.4
• CVE-2026-23734XWiki Platform is a generic wiki platform. Versions prior to…9.3
• CVE-2026-23735GraphQL Modules is a toolset of libraries and guidelines ded…8.7
• CVE-2026-23736seroval facilitates JS value stringification, including comp…9.8
• CVE-2026-23737seroval facilitates JS value stringification, including comp…7.5
• CVE-2026-23738Asterisk is an open source private branch exchange and telep…6.1