CyberRota Analysis
AI-GeneratedFreeRDP clients using the GFX pipeline versions 3.21.0 through 3.27.0 are vulnerable to a buffer overflow due to an incomplete fix for a previous vulnerability, which allows a malicious RDP server to exploit the flaw by sending a specially crafted payload. This can lead to potential remote code execution, posing a critical risk to affected systems. Organizations using FreeRDP should prioritize upgrading to version 3.28.0 to mitigate this severe security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incomplete fix for CVE-2026-23530 in planar_decompress_plane_rle_only in libfreerdp/codec/planar.c, allowing a malicious RDP server to send a truncated RDPGFX_CMDID_WIRETOSURFACE_1 planar payload that reads one byte past the input buffer. This issue is fixed in version 3.28.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)