VULNERABILITY INTELLIGENCE

CVE-2026-112279

CVSS score7.1 HIGH

EPSS probability0.16%

CISA KEVNot currently listed

Published2026-10-19

Last modified2026-10-19

Description

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble an…