Unrated severityNVD Advisory· Published Feb 25, 2026· Updated Feb 26, 2026
FreeRDP has global-buffer-overflow in xf_rail_server_execute_result
CVE-2026-25942
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xf_rail_server_execute_result indexes the global error_code_names[] array (7 elements, indices 0–6) with an unchecked execResult->execResult value received from the server, allowing an out-of-bounds read when the server sends an execResult value of 7 or greater. Version 3.23.0 fixes the issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/channels/rail/client/rail_orders.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/blob/3370e30e92a021eb680892dda14d642bc8b8727c/client/X11/xf_rail.cmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/commit/9362a0bf8dda04eedbca07d5dfaec1044e67cc6bmitrex_refsource_MISC
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-78q6-67m7-wwf6mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.