CVE-2026-111881 | FreeRDP up to 3.14.1/3.31.x WinPR BMP writer clipboard_synthesize_image_format_to_bmp integer underflow

October 17, 2026 Yanac

A vulnerability classified as critical was found in FreeRDP up to 3.14.1/3.31.x. This affects the function clipboard_synthesize_image_format_to_bmp of the component WinPR BMP writer. Such manipulation leads to integer underflow.

This vulnerability is referenced as CVE-2026-111881. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More