CVE-2026-45700Disclosure(freerdp / freerdp)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An attacker can bypass the check with a large nDstStep and a large nXDst, causing planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.

freerdp CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

freerdp

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-29); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

freerdp

Products

freerdp

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

ThreatCluster@threatcluster119d
Disclosure
Ubuntu's USN-8432-1 reports that FreeRDP flaw CVE-2026-45700 allows out-of-bounds heap writes leading to denial of service or code execution across six Ubuntu releases from 18.04 LTS to 26.04 LTS. https://threatcluster.io/cluster/critical-freerdp-vulnerabilities-affect-multiple-ubuntu-rele-8ba1f966
Post summary
The post announces a new FreeRDP vulnerability (CVE-2026-45700) that causes out‑of‑bounds heap writes, potentially allowing denial of service or code execution on several Ubuntu releases, without providing a PoC, exploit, or patch details.
0001052
348 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2026-45700 Out-of-Bounds Heap Write in FreeRDP Planar Bitmap Decoder Prior to 3.26.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45700
Post summary
The text announces CVE‑2026‑45700, an out-of-bounds heap write bug in FreeRDP versions prior to 3.26.0, and provides a link for further details.
0000067
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	freerdp	freerdp	-	-	-

Explore more

Back to dashboard freerdp CVEs freerdp vulnerabilities