CVE-2026-112278

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...

CVE-2026-112278

The rdesktop client (versions through 1.9.0 ) is vulnerable to a heap out-of-bounds read in the process_raw_bmpcache() function within orders.c. A malicious RDP server can trigger this by sending a raw bitmap cache order with large width, height, and bpp values but a tiny payload, causing memcpy(...

EUVD-2026-104295

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...

CVE-2026-112278 rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in processrawbmpcache in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy to read past...