Medium [CVE-2026-114044] Android client heap out-of-bounds read via graphics pipeline
This medium-severity Red Hat Linux advisory covers CVE-2026-114044.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
A flaw was found in FreeRDP. The Android client does not validate mappedWidth and mappedHeight from RDPGFX_MAP_SURFACE_TO_WINDOW_PDU against the surface buffer.
A malicious RDP server can cause android_UpdateWindowFromSurface to read beyond the allocation, leading to crashes or memory disclosure. This issue affects FreeRDP before 3.32.1 in the Android client only.
This issue is rated Moderate because a malicious RDP server can cause limited confidentiality impact (C:L) through an out-of-bounds read in the Android FreeRDP client graphics pipeline. The vulnerable code is specific to the Android client (aFreeRDP) and is not part of the Linux desktop FreeRDP packages.
Red Hat Enterprise Linux and other Red Hat products that ship the Linux FreeRDP client/libraries do not include the Android client code path and are not affected. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Weakness: CWE-125.
- < 3.32.1
Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source
Mitigation checklist
- This issue affects the FreeRDP Android client only; Red Hat Enterprise Linux FreeRDP packages are not affected. On Android, connect only to trusted RDP servers and upgrade FreeRDP/aFreeRDP to 3.32.1 or later when available. If GFX/window-mapped surfaces are unused, disable GFX as a workaround per upstream guidance. No Red Hat product package update is required for this CVE.
Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.