CVE-2026-114044 FreeRDP CVE debrief

Who should care

Defenders responsible for managing and securing Android clients using FreeRDP should assess exposure and prioritize patching or mitigation. This includes reviewing the current version of FreeRDP in use, identifying potentially affected systems, and planning for updates or mitigations. Additionally, defenders should consider implementing compensating controls, such as monitoring RDP traffic for suspicious activity, and tracking exceptions and retesting rem

Why it matters

Defenders should care about CVE-2026-114044 because it affects FreeRDP before 3.32.1 Android client, allowing malicious RDP servers to read beyond surface buffers, potentially leading to crashes or memory disclosure. Defenders responsible for managing and securing Android clients using FreeRDP should assess exposure and prioritize patching or mitigation.

• Potential crashes or memory disclosure due to heap out-of-bounds read
• Possible data exposure or integrity issues
• Need for patching or mitigation to prevent exploitation
• Verification of FreeRDP version and Android client configuration required

Technical summary

The vulnerability exists in the Android client of FreeRDP before version 3.32.1, allowing malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. This can lead to crashes or memory disclosure. The issue arises from the lack of validation on the dimensions supplied by the RDP server, which can cause the android_UpdateWindowFromSurface function to copy heap memory beyond the allocation. Defenders should prioritize patching or mitigating this vulnerability, especially for Android clients using FreeRDP versions before 3.32.1.

Defensive priority

Defenders should prioritize patching or mitigating this vulnerability, especially for Android clients using FreeRDP versions before 3.32.1.

Recommended defensive actions

• Patch or upgrade FreeRDP to version 3.32.1 or later
• Implement network segmentation and isolation to limit access to sensitive areas
• Monitor RDP traffic for suspicious activity
• Consider using compensating controls, such as Web Application Firewalls
• Review and update asset inventory to identify potentially affected systems
• Perform exposure review to determine potential impact on the organization
• Track exceptions and retest remediated assets to ensure effectiveness of mitigation efforts

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions. FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client. The vulnerability allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFX_MAP_SURFACE_TO_WINDOW_PDU with oversized dimensions, causing android_UpdateWindowFromSurface to copy heap memory beyond the allocation, .

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.