CVE-2026-112279 in rdesktop
الملخص
بحسب MITRE • 19/10/2026
rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble and short payload, causing memcpy() reads past the receive buffer and denial of service.
If you want to get best quality of vulnerability data, you may have to visit VulDB.