← CVE Radar
CVE-2026-57158FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530
FreeRDP is a free implementation of the Remote Desktop Protocol. From 3.21.0 before 3.28.0, FreeRDP clients using the GFX pipeline contain an incomplete fix for CVE-2026-23530 in planar_decompress_plane_rle_only in libfreerdp/codec/planar.c, allowing a malicious RDP server to send a truncated RDPGFX_CMDID_WIRETOSURFACE_1 planar payload that reads one byte past the input buffer. This issue is fixed in version 3.28.0.
5.1 MEDIUMEPSS 0.69%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.1 | MEDIUM | 4.0GitHub_M (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N |
| 9.1 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Details
- CVE ID
- CVE-2026-57158
- Status
- Modified
- Assigner (CNA)
- GitHub_M
- Published
- Jul 10, 2026
- Last modified
- 2026-07-14 15:17 UTC
- Weaknesses
- CWE-125 · Out-of-bounds Read
Affected Products
As published by the CNA in the CVE record.
FreeRDPFreeRDP1 version range
- >= 3.21.0, < 3.28.0