CVE-2026-55193 | FreeRDP up to 3.26.x RPC Gateway rpc_bind.c rpc_channel_read max_xmit_frag heap-based overflow

A vulnerability was found in FreeRDP up to 3.26.x. It has been classified as problematic. This issue affects the function rpc_channel_read of the file libfreerdp/core/gateway/rpc_bind.c of the component RPC Gateway. This manipulation of the argument max_xmit_frag causes heap-based buffer overflow.

This vulnerability is registered as CVE-2026-55193. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More