CVE-2026-111880

FreeRDP versions 2.0.0 before 3.32.0 are vulnerable to a heap out-of-bounds write within the server hash-callback NTLM path. The root cause is a failure to validate the MIC offset , allowing unauthenticated attackers to send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MI...