The vulnerability of the glyph_cache_get() function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP allows a attacker to disclose sensitive information or cause service failure.

The vulnerability of the glyphcacheget function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...

CVE-2026-55564

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the glyphcacheget function. By sending crafted glyph fragments, the server can cause the client to read beyond the intended memory buffer. This can lead to a client crash...

EUVD-2026-62662

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

CVE-2026-55564: Out-of-bounds Read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...