CVE-2026-111379
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
29/100
Published: 2026-10-16
Modified: 2026-10-28
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Passive
AT:
None
VC:
High
VI:
High
VA:
High
Description
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist_cache_get_data, causing fread to overflow an undersized buffer and potentially execute code.
Weakness Classification (1)
Affected Software (4)
References & Advisories (3)
Third Party Advisory
Exploit
Vendor Advisory
Exploit
Third Party Advisory