Integer overflow in xrdp - CVE-2026-41521
Published: July 2, 2026
Vulnerability identifier: #VU136788
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-41521
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information or cause a denial of service.
The vulnerability exists due to integer overflow in screen update message processing in vnc-any mode when processing crafted image dimensions from a VNC server. A remote attacker can send crafted screen update messages to disclose sensitive information or cause a denial of service.
Exploitation requires the vnc-any connection mode or another configuration that allows connections to arbitrary VNC hosts.
Affected software
xrdp
Debian Linux
Fedora
xrdp (Debian package)
xrdp
Debian Linux
Fedora
xrdp (Debian package)
xrdp
How to mitigate CVE-2026-41521
Install security update from vendor's website.
xrdp - update to 0.10.6.1
xrdp (Debian package) - update to 0.10.1-3.1+deb13u2
xrdp - addressed in versions 0.10.6.1-1.el8, 0.10.6.1-1.el9, 0.10.6.1-1.fc43, 0.10.6.1-1.fc44
xrdp (Debian package) - update to 0.10.1-3.1+deb13u2
xrdp - addressed in versions 0.10.6.1-1.el8, 0.10.6.1-1.el9, 0.10.6.1-1.fc43, 0.10.6.1-1.fc44