Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface height to write past U/V planes, enabling heap corruption and potential code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Update FreeRDP to 3.32.0+ to fix CVE-2026-111382 (CVSS 8.8), a client-side heap write flaw from malicious RDP servers. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/09vs561QC9