What is GHSA-45g6-44vr-p7wm?

GHSA-45g6-44vr-p7wm is a security advisory published by GitHub Security Advisories with High severity. FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a...

Which CVE IDs does GHSA-45g6-44vr-p7wm cover?

GHSA-45g6-44vr-p7wm covers the following CVE IDs: CVE-2026-111881. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-45g6-44vr-p7wm?

GHSA-45g6-44vr-p7wm has a CVSS v3 base score of 7.6, published by GitHub Security Advisories.

GHSA-45g6-44vr-p7wmHighCVSS 7.6

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a...

Vendor

GitHub Security Advisories

Published

October 17, 2026

Last Modified

October 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-111881 →

📋 Description

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboard_synthesize_image_format_to_bmp for CF_DIB/CF_DIBV5, crashing the client or causing an out-of-bounds write.

🔗 References (4)

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-27m7-gwhh-6hhf
https://nvd.nist.gov/vuln/detail/CVE-2026-111881
https://www.vulncheck.com/advisories/freerdp-3.14.1-before-3.32.0-integer-underflow-in-bmp-writer-via-clipboard
https://github.com/advisories/GHSA-45g6-44vr-p7wm