CVE-2026-91958

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0

Description Insufficient validation of MonitorIds array values during the parsing of RDP connection files allows unbounded array indexing within the xf detect monitors() function. A remote attacker can use a specially crafted RDP file containing an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write operations when the file is opened in xfreerdp.

Recommendations Update to version 3.31.0 or later.