CVE-2026-29775

CVE-2026-29775 affects FreeRDP prior to version 3.24.0, where the bitmap cache subsystem is vulnerable to a heap-out-of-bounds condition in bitmap_cache_put. The root cause is an off-by-one boundary check that permits a malicious server to send a CACHE_BITMAP_ORDER (Rev1) with cacheId equal to ma...