Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update_read_delta_points in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeof(DELTA_POINT), allowing a malicious RDP peer to allocate an undersized heap buffer and then write beyond it during initialization. This issue is fixed in version 3.28.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
FreeRDP のクライアントに整数オーバーフローの脆弱性。CVSS 9.8 ですが、影響は32ビットビルドに限られます。攻撃者になるのは接続先のRDPサーバー側で、守るのはつなぎに行く側。修正は 3.28.0。まず自分のビルドが何ビットかを確かめるところから。 https://cve.autoarticles.net/cve/CVE-2026-57156
Post summary
The post announces an integer overflow vulnerability in FreeRDP affecting 32‑bit clients, scores 9.8, and indicates that version 3.28.0 contains the fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |