CVE-2026-25942

FreeRDP is affected prior to 3.23.0. The vulnerability occurs in xf_rail_server_execute_result, which uses an unchecked execResult value from the server to index the global error_code_names[] array (size 7, indices 0–6). An execResult of 7 or greater allows an out-of-bounds read. The issue is fix...