CVE-2026-114041

Medium

Description

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size, leaking heap memory or crashing.

SeverityMedium

CVSS6.5

Exploit probability—

ProductFreeRDP

PublishedOct 21, 2026

First seenOct 21, 2026

Weakness typeCWE-125Out-of-bounds read

How to fix

Update

FreeRDP FreeRDP3.32.1 or later

Vendor advisories

github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c49c-xm94-5qf3

Affected products

Product	Affected versions	Fixed in
FreeRDP FreeRDP	v < 3.32.1	3.32.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.