CVE-2026-91964 in FreeRDP
요약
\~에 의해 MITRE • 2026. 09. 15.
FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written to a fixed 512-byte buffer without validation, causing client crashes or potential code execution when chained with memory disclosure.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.