CVE-2026-109242
High · 7.1CVSS
7.1
EPSS
0.3%
Published
Oct 12, 2026
CISA due date
—
The record
FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121227 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121213 Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121207 Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed… CWE-908
- CVE-2026-121176 Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121173 Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121143 Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121095 Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908
- CVE-2026-121072 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-908