CVE-2026-121964 | FreeRDP up to 3.32.1 RD Gateway RPC Client rpc_client_recv_fragment alloc_hint/frag_length buffer overflow

November 4, 2026 Yanac

A vulnerability was found in FreeRDP up to 3.32.1. It has been rated as problematic. Affected by this vulnerability is the function rpc_client_recv_fragment of the component RD Gateway RPC Client. The manipulation of the argument alloc_hint/frag_length leads to buffer overflow.

This vulnerability is listed as CVE-2026-121964. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More