CVE-2026-57157

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0

Description FreeRDP server implementations with the MS-RDPECAM camera device enumerator channel enabled contain a flaw where the system scans the DeviceName and VirtualChannelName fields for a NUL terminator in the channels/rdpecam/server/camera device enumerator main.c file. The system then dereferences once past the scan bound, which allows a malicious RDP client to trigger a 1- to 2-byte out-of-bounds heap read. An out-of-bounds heap read occurs when a program reads data past the end of the allocated memory buffer on the heap.

Recommendations Update to version 3.28.0. As a temporary mitigation, disable the MS-RDPECAM camera device enumerator channel.