FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory… (CVE-2026-111379)

The vulnerability in FreeRDP prior to version 3.32.0 is a heap buffer overflow in persistent_cache_read_entry_v3. Local attackers can exploit this by supplying a crafted v3 persistent cache file with manipulated width and height parameters. These parameters cause an integer wraparound in the size calculation within persist_cache_get_data, leading fread to overflow a buffer that is too small. This memory corruption can result in arbitrary code execution. The CVSS 3.1 score is 7.3, indicating high severity, with attack vector local, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability.

Successful exploitation allows local attackers to corrupt memory and potentially execute arbitrary code with the privileges of the affected process. This can lead to full compromise of the system or application using FreeRDP. The vulnerability affects confidentiality, integrity, and availability.

A fix is available in FreeRDP version 3.32.0. Users should upgrade to version 3.32.0 or later to remediate this vulnerability. No vendor advisory content was provided to indicate alternative mitigations or temporary fixes.