CVE-2026-121962

FreeRDP versions before 3.32.2 are vulnerable to a heap buffer overflow in the transport_default_read_pdu function. The issue occurs during PROTOCOL_HYBRID_EX CredSSP when handling partial Early User Authorization (EUA) reads. A malicious RDP server can split the four-byte EUA result into short r...

CVE-2026-121962 FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read

FreeRDP before 3.32.2 contains a heap buffer overflow in transportdefaultreadpdu when handling partial Early User Authorization reads during PROTOCOLHYBRIDEX CredSSP. A malicious RDP server can split the four-byte EUA result into short reads that advance the stream pointer beyond the 16 KiB...