CVE-2026-73242

Katalog CVE

CVSS 9.1 · Critical EPSS 0,40%

Kerentanan Heap-based Buffer Overflow pada freerdp. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.

Rincian

Terbit di NVD

11 Agustus 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vv64-95pc-vj9v exploit · mitigasi · advisory vendor
• https://github.com/FreeRDP/FreeRDP/commit/0adf5e30d01be84e190a359a7bdd37bc51d740cc patch
• https://github.com/FreeRDP/FreeRDP/pull/13065 issue tracking · patch
• https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0 release notes