CVE-2026-45700

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The planar bitmap decoder contains an out-of-bounds heap write vulnerability when processing RLE planar data. A remote attacker could exploit this by providing specially crafted RLE planar data, leading to an out-of-bounds write. This could result in arbitrary code execution or a denial of service.

A flaw in FreeRDP's planar bitmap decoder allows an out-of-bounds heap write when processing malicious RLE planar data. An attacker can exploit this by enticing a user to connect to a malicious RDP server, potentially resulting in arbitrary code execution or a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure, restrict FreeRDP connections to trusted remote desktop servers. Avoid connecting to untrusted RDP endpoints, as processing malicious RLE planar data from such a server could trigger the vulnerability.