CVE-2026-57156

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0

Description FreeRDP clients on 32-bit builds contain an integer overflow in the update read delta points() function within libfreerdp/core/orders.c. This occurs when multiplying an attacker-controlled point count by sizeof(DELTA POINT), which can lead to the allocation of an undersized heap buffer. A malicious RDP peer can exploit this to write beyond the buffer boundaries during initialization.

Recommendations Update to version 3.28.0.