CVE-2026-109242
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
64/100
Published: 2026-10-12
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
Passive
S:
X
AT:
None
VC:
Low
VI:
None
VA:
High
Description
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
Weakness Classification (1)
References & Advisories (2)
Third Party Advisory
Exploit
Vendor Advisory