CVE-2026-23534

CVE-2026-23534 affects FreeRDP prior to version 3.21.0, where a client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer. A malicious server can trigger this overflow, potentially crashing...