CVE-2026-111382 | FreeRDP up to 3.31.x RDPGFX general_LumaToYUV444 out-of-bounds write

October 16, 2026 Yanac

A vulnerability was found in FreeRDP up to 3.31.x. It has been declared as critical. This vulnerability affects the function general_LumaToYUV444 of the component RDPGFX. Such manipulation leads to out-of-bounds write.

This vulnerability is listed as CVE-2026-111382. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More