CVE-2026-109249

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0

Description A heap out-of-bounds read occurs in the freerdp assistance parse all elements of() function. This happens because the parsing cursor advances without reducing the remaining length, allowing the scan window to exceed the decrypted ConnectionString2 buffer. An attacker can trigger a crash of xfreerdp before an RDP connection is established by providing a specially crafted .msrcIncident invitation file and password.

Recommendations Update FreeRDP to version 3.32.0 or later.