Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cache_v2_capability_set rejects only numCellCaches values above 5, yet the bitmap cache v2 cell array is later accessed at fixed indices 0 through 4. A client connecting to the proxy can declare fewer than five cell caches in its Confirm Active, causing heap corruption, heap data leakage to the backend, or a crash.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 Alerta 2026-141 | FreeRDP: dos fallas críticas (CVSS 9.8) en proxy y cliente. CVE-2026-121952 (escritura fuera de límites) y CVE-2026-121953 (use-after-free en rdpgfx). Afecta versiones previas a 3.32.2; hay PoC. Actualiza a 3.32.2. #FreeRDP #CVE https://beaconlab.us/publicacion/alerta-2026-141-vulnerabilidades-criticas-en-freerdp/
🆕 New CVEs FreeRDP: 2 critical CVEs Worst: out-of-bounds write in RDP proxy bitmap cache handling (CVE-2026-121952) Patch → 3.32.2 https://cve.now/CVE-2026-121952?release=CVE-2026-121953&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |