CVE-2026-23530: Freerdp Received Capabilities Desync Resize
Resizing a single capability buffer (FreeRDP_ReceivedCapabilityData / FreeRDP_ReceivedCapabilities / FreeRDP_ReceivedCapabilityDataSizes) via freerdp_settings_set_pointer_len_ while bumping the shared FreeRDP_ReceivedCapabilitiesSize tracker leaves the three logically parallel arrays out of sync. Later code iterates all of them up to ReceivedCapabilitiesSize
Cgreprules fetch cve-2026-23530-freerdp-received-capabilities-desync-resize --engine opengrepDescription
Resizing a single capability buffer (FreeRDP_ReceivedCapabilityData / FreeRDP_ReceivedCapabilities / FreeRDP_ReceivedCapabilityDataSizes) via freerdp_settings_set_pointer_len_ while bumping the shared FreeRDP_ReceivedCapabilitiesSize tracker leaves the three logically parallel arrays out of sync. Later code iterates all of them up to ReceivedCapabilitiesSize
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.