{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/freerdp-3.6.0---3.32.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-109242"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FreeRDP (\u003c 3.0.0)","FreeRDP (3.6.0 - 3.32.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FreeRDP"],"content_html":"\u003cp\u003eFreeRDP versions prior to 3.0.0 and 3.6.0 before 3.32.0 contain a vulnerability where uninitialized heap memory from un-decoded progressive tiles is rendered. This occurs because the tile buffer is allocated without zeroing out memory, allowing an attacker to access sensitive information residing in the heap. A malicious RDP server can exploit this by sending a specifically crafted sequence of WBT_TILE_FIRST and WBT_TILE_UPGRADE messages. Depending on the server's input, the client may render leaked heap bytes directly to the screen or encounter an unhandled memory condition leading to a process crash (Denial of Service). This issue affects all platforms utilizing the affected FreeRDP versions as a remote desktop client.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a malicious server to view potentially sensitive data stored in the client's heap memory or force the client application to terminate. This poses a risk to users connecting to untrusted RDP servers, as memory contents could be visualized on the client's display.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to FreeRDP version 3.32.0 or later to ensure heap buffers are properly initialized.\u003c/li\u003e\n\u003cli\u003eReview patch notes for CVE-2026-109242 to verify build requirements.\u003c/li\u003e\n\u003cli\u003eUntil patching is possible, restrict RDP client connections to known, trusted servers and avoid connecting to unauthorized or public-facing RDP infrastructure.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T18:34:17Z","date_published":"2026-10-12T18:34:17Z","id":"https://feed.craftedsignal.io/briefs/2026-10-freerdp-heap-disclosure/","summary":"FreeRDP versions before 3.0.0 and 3.6.0 before 3.32.0 are vulnerable to heap memory disclosure and denial-of-service attacks triggered by a malicious RDP server sending crafted progressive tile sequences.","title":"Information Disclosure and DoS in FreeRDP via Heap Memory Leak","url":"https://feed.craftedsignal.io/briefs/2026-10-freerdp-heap-disclosure/"}],"language":"en","title":"CraftedSignal Threat Feed - FreeRDP (3.6.0 - 3.32.0)","version":"https://jsonfeed.org/version/1.1"}