Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-10T19:51:00 FreeRDP: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CWE-125

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled scan attacker-supplied DeviceName and VirtualChannelName fields for a NUL terminator in channels/rdpecam/server/camera_device_enumerator_main.c and then dereference once past the scan bound, allowing a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. This issue is fixed in version 3.28.0.

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP). FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled are vulnerable to an out-of-bounds heap read. A malicious RDP client can exploit this by manipulating the DeviceName and VirtualChannelName fields, which can lead to information disclosure and denial of service.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Red Hat Enterprise Linux 10 Fix deferred freerdp Red Hat Enterprise Linux 6 Out of support scope freerdp Red Hat Enterprise Linux 7 Out of support scope freerdp Red Hat Enterprise Linux 8 Fix deferred freerdp Red Hat Enterprise Linux 9 Fix deferred freerdp https://www.cve.org/CVERecord?id=CVE-2026-57157 https://nvd.nist.gov/vuln/detail/CVE-2026-57157 https://github.com/FreeRDP/FreeRDP/commit/02991e7b3cc0b9800b09030c0e9c80bab877d668 https://github.com/FreeRDP/FreeRDP/commit/bd789a31cb794750dbe5e7c0e205981074cb681a https://github.com/FreeRDP/FreeRDP/pull/12930 https://github.com/FreeRDP/FreeRDP/pull/12945 https://github.com/FreeRDP/FreeRDP/releases/tag/3.28.0 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47fr-jw86-c3fj