Search: CVE-2026-55648

CVE-2026-55648 is an integer overflow vulnerability in FreeRDP prior to version 3.27.0. It occurs in the function freerdp_image_copy_from_icon_data, which calculates the required buffer size for icon data using 32-bit arithmetic. A malicious RDP server can send icon dimensions that cause this calculation to wrap around, bypassing bounds checks and potentially leading to out-of-bounds reads of attacker-controlled data. This affects RemoteApp clients using the vulnerable library path, while the xfreerdp client has a mitigation. The issue is fixed in FreeRDP version 3.27.0.