CVE-2026-41521

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description An integer overflow occurs when processing screen update messages in the vnc-any connection mode. A remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer size calculation, leading to an undersized allocation. Subsequent processing of image data using the original oversized parameters results in an out-of-bounds read. An unauthenticated remote attacker can exploit this to disclose sensitive information from the heap memory or cause a denial of service (DoS) via a process crash.

Recommendations Update to version 0.10.6.1.