CVE-2026-109249

🗓️ 13 Oct 2026 11:36:52Reported by redhat.comType

A flaw was found in FreeRDP. An out-of-bounds read vulnerability in the Remote Assistance file parser allows an attacker to cause a Denial of Service (DoS). By convincing a user to open a specially crafted Remote Assistance invitation file, the ap...

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-109249	12 Oct 202616:34	–	circl
CVE	CVE-2026-109249	12 Oct 202616:04	–	cve
Cvelist	CVE-2026-109249 FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing	12 Oct 202616:04	–	cvelist
Debian CVE	CVE-2026-109249	12 Oct 202616:04	–	debiancve
EUVD	EUVD-2026-97693	12 Oct 202616:04	–	euvd
Mend	CVE-2026-109249	12 Oct 202616:04	–	mend
NVD	CVE-2026-109249	12 Oct 202617:17	–	nvd
OSV	DEBIAN-CVE-2026-109249	12 Oct 202617:17	–	osv
Positive Technologies	PT-2026-110666	12 Oct 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-109249 FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing	12 Oct 202616:04	–	vulnrichment

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-109249
github	www.github.com/FreeRDP/FreeRDP/commit/2a737ce14dfee036a12d2d3e87473ace3e20349b
github	www.github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gvq8-v2fm-ffxv
vulncheck	www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-heap-out-of-bounds-read-via-remote-assistance-file-parsing
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

13 Oct 2026 11:36Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.5

CVSS 46.8

EPSS0.0012

SSVC