CVE-2026-109253
Publication date 12 October 2026
Last updated 14 October 2026
Ubuntu priority
Description
FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding. Malicious or compromised RDP servers can send crafted unaligned RDPEAR payloads, such as CreateApReqAuthenticatorReq messages, to clients using Remote Credential Guard, causing over-reads and potentially crashing the client process.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| freerdp | 26.10 stonking | Not in release |
| 26.04 LTS resolute | Not in release | |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| freerdp2 | 26.10 stonking | Not in release |
| 26.04 LTS resolute | Not in release | |
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| freerdp3 | 26.10 stonking |
Not affected
|
| 26.04 LTS resolute |
Fixed in 3.32.0+dfsg-0ubuntu0.26.04.1
|
|
| 24.04 LTS noble |
Fixed in 3.32.0+dfsg-0ubuntu0.24.04.1
|
|
| 22.04 LTS jammy | Not in release |
Severity score breakdown
CVSS version:
Base score
6.0 · Medium
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Base score
5.3 · Medium
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H