CVE-2026-111375

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0

Description The Windows RAIL client contains an out-of-bounds read issue where malicious RDP servers can trigger heap over-reads by sending window titles that are not NUL-terminated. This occurs when a full-length WINDOW ORDER FIELD TITLE update is processed by the wf rail window common() function and passed to SetWindowTextW(), which can lead to corrupted titles or client crashes.

Recommendations Update FreeRDP to version 3.32.0.