CVE-2026-114044 | FreeRDP up to 3.32.0 Android Client android_UpdateWindowFromSurface mappedWidth/mappedHeight out-of-bounds

October 21, 2026 Yanac

A vulnerability marked as problematic has been reported in FreeRDP up to 3.32.0. Affected by this issue is the function android_UpdateWindowFromSurface of the component Android Client. The manipulation of the argument mappedWidth/mappedHeight leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-114044. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More