Unrated severityNVD Advisory· Published Feb 25, 2026· Updated Feb 26, 2026
FreeRDP has global-buffer-overflow in xf_rail_server_execute_result
CVE-2026-25942
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xf_rail_server_execute_result indexes the global error_code_names[] array (7 elements, indices 0–6) with an unchecked execResult->execResult value received from the server, allowing an out-of-bounds read when the server sends an execResult value of 7 or greater. Version 3.23.0 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/freerdp2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/freerdp&distro=openSUSE%20Tumbleweed
< 2.11.7-8.1+ 1 more
- (no CPE)range: < 2.11.7-8.1
- (no CPE)range: < 3.24.1-1.1
Patches
Vulnerability mechanics
References
6- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/commit/9362a0bf8dda04eedbca07d5dfaec1044e67cc6bmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78q6-67m7-wwf6mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.