CVE-2026-72745
FreeRDP: FreeRDP: Information disclosure and memory corruption via malformed Kerberos GSS Wrap token
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 11, 2026
Updated · August 19, 2026
Description
A flaw was found in FreeRDP. A malicious peer, either a server or client, can exploit an out-of-bounds vulnerability during CredSSP/NLA authentication. By supplying a large 'extra count' (EC) value in a Kerberos GSS Wrap token, an attacker can cause the decryption operation to access memory outside of its intended buffer. This can lead to information disclosure, memory corruption, or a denial of service.
Statement
CVE-2026-72745 has been rejected as a duplicate of CVE-2026-73242 (ref: https://www.cve.org/CVERecord?id=CVE-2026-72745).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.4CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-823 · Use of Out-of-range Pointer Offset