p PatchFirst

CVE-2026-111381

CVE-2026-111381 · FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser

This page contains facts from public vulnerability sources. Check the original advisory before updating.

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes mismatched entry size accounting and fixed 16 KiB reads, leading to crashes or code execution when loaded.

CVSS 7.0 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • freerdp

    Versions
    • ≥ 0, < 3.32.0: Affected (semver)
    • 3.32.0: Not affected (semver)

    Update to 3.32.0

  • freerdp2 Debian:12

    Versions
    • 2.10.0+dfsg1-1
    • 2.10.0+dfsg1-1.1
    • 2.11.2+dfsg1-1
    • 2.11.2+dfsg1-1.1~exp1
    • 2.11.2+dfsg1-1.1~exp2
    • 2.11.5+dfsg1-1
    • 2.11.7+dfsg1-1
    • 2.11.7+dfsg1-2
    • 2.11.7+dfsg1-3
    • 2.11.7+dfsg1-4
    • 2.11.7+dfsg1-5
    • 2.11.7+dfsg1-6
    • 2.11.7+dfsg1-6~deb12u1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp3 Debian:13

    Versions
    • 3.15.0+dfsg-2.1
    • 3.15.0+dfsg-2.1+deb13u1
    • 3.15.0+dfsg-2.1+deb13u2
    • 3.15.0+dfsg-2.1+deb13u3
    • 3.16.0+dfsg-1
    • 3.16.0+dfsg-2
    • 3.17.0+dfsg-1
    • 3.17.1+dfsg-1
    • 3.17.1+dfsg-2
    • 3.17.2+dfsg-1
    • 3.17.2+dfsg-2
    • 3.17.2+dfsg-3
    • 3.18.0+dfsg-1
    • 3.19.0+dfsg-1
    • 3.19.1+dfsg-1
    • 3.20.0+dfsg-1
    • 3.20.2+dfsg-1
    • 3.21.0+dfsg-1
    • 3.22.0+dfsg-1
    • 3.22.0+dfsg-1~bpo13+0
    • 3.22.0+dfsg-1~bpo13+1
    • 3.22.0+dfsg-3
    • 3.23.0+dfsg-1
    • 3.23.0+dfsg-1~bpo13+1
    • 3.24.0+dfsg-1
    • 3.24.0+dfsg-2
    • 3.24.1+dfsg-1
    • 3.24.2+dfsg-1
    • 3.24.2+dfsg-1~bpo13+1
    • 3.25.0+dfsg-1
    • 3.25.0+dfsg-2
    • 3.25.0+dfsg-3
    • 3.25.0+dfsg-4
    • 3.25.0+dfsg-5
    • 3.26.0+dfsg-1
    • 3.26.0+dfsg-1~bpo13+1
    • 3.27.0+dfsg-1
    • 3.27.1+dfsg-1
    • 3.28.0+dfsg-1
    • 3.28.0+dfsg-2
    • 3.29.0+dfsg-1
    • 3.30.0+dfsg-1
    • 3.30.0+dfsg-1~bpo13+1
    • 3.31.0+dfsg-1
    • 3.31.1+dfsg-1
    • 3.31.1+dfsg-1~bpo13+1
    • 3.32.0+dfsg-1
    • 3.32.1+dfsg-1
    • 3.32.1+dfsg-1~bpo13+1
    • 3.32.2+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp3 Debian:14

    Versions
    • 3.15.0+dfsg-2.1
    • 3.16.0+dfsg-1
    • 3.16.0+dfsg-2
    • 3.17.0+dfsg-1
    • 3.17.1+dfsg-1
    • 3.17.1+dfsg-2
    • 3.17.2+dfsg-1
    • 3.17.2+dfsg-2
    • 3.17.2+dfsg-3
    • 3.18.0+dfsg-1
    • 3.19.0+dfsg-1
    • 3.19.1+dfsg-1
    • 3.20.0+dfsg-1
    • 3.20.2+dfsg-1
    • 3.21.0+dfsg-1
    • 3.22.0+dfsg-1
    • 3.22.0+dfsg-1~bpo13+0
    • 3.22.0+dfsg-1~bpo13+1
    • 3.22.0+dfsg-3
    • 3.23.0+dfsg-1
    • 3.23.0+dfsg-1~bpo13+1
    • 3.24.0+dfsg-1
    • 3.24.0+dfsg-2
    • 3.24.1+dfsg-1
    • 3.24.2+dfsg-1
    • 3.24.2+dfsg-1~bpo13+1
    • 3.25.0+dfsg-1
    • 3.25.0+dfsg-2
    • 3.25.0+dfsg-3
    • 3.25.0+dfsg-4
    • 3.25.0+dfsg-5
    • 3.26.0+dfsg-1
    • 3.26.0+dfsg-1~bpo13+1
    • 3.27.0+dfsg-1
    • 3.27.1+dfsg-1
    • 3.28.0+dfsg-1
    • 3.28.0+dfsg-2
    • 3.29.0+dfsg-1
    • 3.30.0+dfsg-1
    • 3.30.0+dfsg-1~bpo13+1
    • 3.31.0+dfsg-1
    • 3.31.1+dfsg-1
    • 3.31.1+dfsg-1~bpo13+1
    Affected ranges
    • ECOSYSTEM: < 3.32.0+dfsg-1

    Update to 3.32.0+dfsg-1

  • freerdp Ubuntu:16.04:LTS

    Versions
    • 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
    • 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2
    • 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
    • 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp2 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.0.0~git20170725.1.1648deb+dfsg1-1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1
    • 2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2
    • 2.0.0~git20170725.1.1648deb+dfsg1-6
    • 2.0.0~git20170725.1.1648deb+dfsg1-6build1
    • 2.0.0~git20170725.1.1648deb+dfsg1-7
    • 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
    • 2.1.1+dfsg1-0ubuntu0.18.04.1
    • 2.2.0+dfsg1-0ubuntu0.18.04.1
    • 2.2.0+dfsg1-0ubuntu0.18.04.2
    • 2.2.0+dfsg1-0ubuntu0.18.04.3
    • 2.2.0+dfsg1-0ubuntu0.18.04.4
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm2
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm3
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm4
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm5
    • 2.2.0+dfsg1-0ubuntu0.18.04.4+esm6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp Ubuntu:18.04:LTS

    Versions
    • 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
    • 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
    • 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp2 Ubuntu:Pro:20.04:LTS

    Versions
    • 2.0.0~git20190204.1.2693389a+dfsg1-1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build1
    • 2.0.0~git20190204.1.2693389a+dfsg1-2build2
    • 2.1.1+dfsg1-0ubuntu0.20.04.1
    • 2.2.0+dfsg1-0ubuntu0.20.04.1
    • 2.2.0+dfsg1-0ubuntu0.20.04.2
    • 2.2.0+dfsg1-0ubuntu0.20.04.3
    • 2.2.0+dfsg1-0ubuntu0.20.04.4
    • 2.2.0+dfsg1-0ubuntu0.20.04.5
    • 2.2.0+dfsg1-0ubuntu0.20.04.6
    • 2.6.1+dfsg1-0ubuntu0.20.04.1
    • 2.6.1+dfsg1-0ubuntu0.20.04.2
    • 2.6.1+dfsg1-0ubuntu0.20.04.2+esm1
    • 2.6.1+dfsg1-0ubuntu0.20.04.2+esm2
    • 2.6.1+dfsg1-0ubuntu0.20.04.2+esm3
    • 2.6.1+dfsg1-0ubuntu0.20.04.2+esm4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp2 Ubuntu:22.04:LTS

    Versions
    • 2.3.0+dfsg1-2build1
    • 2.3.0+dfsg1-2ubuntu1
    • 2.3.0+dfsg1-2ubuntu2
    • 2.4.1+dfsg1-1
    • 2.4.1+dfsg1-1ubuntu1
    • 2.4.1+dfsg1-1ubuntu2
    • 2.5.0+dfsg1-1
    • 2.6.0+dfsg1-1
    • 2.6.1+dfsg1-1
    • 2.6.1+dfsg1-3
    • 2.6.1+dfsg1-3ubuntu1
    • 2.6.1+dfsg1-3ubuntu2
    • 2.6.1+dfsg1-3ubuntu2.1
    • 2.6.1+dfsg1-3ubuntu2.2
    • 2.6.1+dfsg1-3ubuntu2.3
    • 2.6.1+dfsg1-3ubuntu2.4
    • 2.6.1+dfsg1-3ubuntu2.5
    • 2.6.1+dfsg1-3ubuntu2.6
    • 2.6.1+dfsg1-3ubuntu2.7
    • 2.6.1+dfsg1-3ubuntu2.8
    • 2.6.1+dfsg1-3ubuntu2.9
    • 2.6.1+dfsg1-3ubuntu2.10
    • 2.6.1+dfsg1-3ubuntu2.11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp3 Ubuntu:24.04:LTS

    Versions
    • 3.4.0+dfsg1-0ubuntu2
    • 3.4.0+dfsg1-0ubuntu3
    • 3.4.0+dfsg1-0ubuntu4
    • 3.5.0+dfsg1-0ubuntu1
    • 3.5.1+dfsg1-0ubuntu1
    • 3.5.1+dfsg1-0ubuntu1.1
    • 3.5.1+dfsg1-0ubuntu1.2
    • 3.5.1+dfsg1-0ubuntu1.4
    • 3.5.1+dfsg1-0ubuntu1.5
    • 3.5.1+dfsg1-0ubuntu1.6
    • 3.30.0+dfsg-0ubuntu0.24.04.1
    • 3.30.0+dfsg-0ubuntu0.24.04.2
    • 3.31.0+dfsg-0ubuntu0.24.04.1
    Affected ranges
    • ECOSYSTEM: < 3.32.0+dfsg-0ubuntu0.24.04.1

    Update to 3.32.0+dfsg-0ubuntu0.24.04.1

  • freerdp2 Ubuntu:Pro:24.04:LTS

    Versions
    • 2.10.0+dfsg1-1.1ubuntu1
    • 2.11.2+dfsg1-1
    • 2.11.2+dfsg1-1build1
    • 2.11.2+dfsg1-1build3
    • 2.11.5+dfsg1-1build1
    • 2.11.5+dfsg1-1build2
    • 2.11.5+dfsg1-1ubuntu0.1~esm1
    • 2.11.5+dfsg1-1ubuntu0.1~esm2
    • 2.11.5+dfsg1-1ubuntu0.1~esm3
    • 2.11.5+dfsg1-1ubuntu0.1~esm4
    • 2.11.5+dfsg1-1ubuntu0.1~esm5
    • 2.11.5+dfsg1-1ubuntu0.1~esm6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freerdp3 Ubuntu:26.04:LTS

    Versions
    • 3.16.0+dfsg-2
    • 3.18.0+dfsg-1ubuntu1
    • 3.19.0+dfsg-1
    • 3.19.1+dfsg-1
    • 3.20.0+dfsg-1
    • 3.20.2+dfsg-1
    • 3.21.0+dfsg-1
    • 3.22.0+dfsg-1
    • 3.24.1+dfsg-1ubuntu1
    • 3.24.2+dfsg-1ubuntu1
    • 3.24.2+dfsg-1ubuntu1.1
    • 3.30.0+dfsg-0ubuntu0.26.04.1
    • 3.30.0+dfsg-0ubuntu0.26.04.2
    • 3.31.0+dfsg-0ubuntu0.26.04.1
    Affected ranges
    • ECOSYSTEM: < 3.32.0+dfsg-0ubuntu0.26.04.1

    Update to 3.32.0+dfsg-0ubuntu0.26.04.1

Original sources

Check your server →