{"id":"CVE-2026-27951","summary":"FreeRDP has possible Integer overflow in Stream_EnsureCapacity","details":"FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `\u003e= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available.","aliases":["GHSA-qcfc-ghxr-h927"],"modified":"2026-08-18T18:39:05.683048Z","published":"2026-02-25T21:07:30.828Z","related":["ALSA-2026:16019","ALSA-2026:16482","ALSA-2026:19358","SUSE-SU-2026:1632-1","SUSE-SU-2026:1633-1","SUSE-SU-2026:1634-1","SUSE-SU-2026:1635-1","SUSE-SU-2026:1640-1","SUSE-SU-2026:3562-1","openSUSE-SU-2026:10611-1","openSUSE-SU-2026:20632-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-190"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27951.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27951.json"},{"type":"ADVISORY","url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27951"},{"type":"FIX","url":"https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/freerdp/freerdp","events":[{"introduced":"0"},{"fixed":"b933ae18d9ad2a1d73c610868fcc30eb61654070"},{"fixed":"118afc0b954ba9d5632b7836ad24e454555ed113"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3.23.0"}]}}],"versions":["3.5.1","3.5.0","3.4.0","3.3.0","3.2.0","3.1.0","3.0.0","3.0.0-rc0","3.0.0-beta4","3.0.0-beta3","3.0.0-beta2","3.0.0-beta1","2.0.0","2.0.0-rc4","2.0.0-rc3","2.0.0-rc2","2.0.0-rc1","2.0.0-rc0","2.0.0-beta1+android11","2.0.0-beta1+android10","1.2.0-beta1+android9","1.2.0-beta1+android7","1.1.0-beta+2013071101","1.1.0-beta1+ios4","1.1.0-beta1+android5","1.1.0-beta1+android4","1.1.0-beta1+ios3","1.1.0-beta1+ios2","1.1.0-beta1+android3","1.1.0-beta1+android2","1.1.0-beta1+ios1","1.1.0-beta1","1.0.1","1.0.0","1.0-beta5","1.0-beta4","1.0-beta2","1.0-beta1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-27951.json","vanir_signatures_modified":"2026-08-18T18:39:05Z","vanir_signatures":[{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"NeedCurrentDirectoryForExePathA"},"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-04050588","signature_type":"Function","signature_version":"v1"},{"target":{"file":"winpr/libwinpr/environment/environment.c","function":"ExpandEnvironmentStringsA"},"deprecated":false,"digest":{"length":121,"function_hash":"126192986776363007155856615511098306567"},"id":"CVE-2026-27951-06796f1d","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"function_hash":"141545325157747395915588133740475331475","length":2185},"id":"CVE-2026-27951-0c7bafca","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/urbdrc/client/libusb/libusb_udevice.c","function":"libusb_udev_control_query_device_text"}},{"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-0cf8e350","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SetCurrentDirectoryW"}},{"deprecated":false,"digest":{"function_hash":"126192986776363007155856615511098306567","length":121},"id":"CVE-2026-27951-15286b8c","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"ExpandEnvironmentStringsW"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/tsmf/client/tsmf_media.c"},"deprecated":false,"digest":{"line_hashes":["82694106547016604061191583540658016577","299582216557497919568902859882013258053","41410525597239800729591348613312781136","208493919059511475829498012206457679020"],"threshold":0.9},"id":"CVE-2026-27951-18fbeb6f","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"103873336758953371091189265992184861450","length":2211},"id":"CVE-2026-27951-1b610b2e","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/X11/xf_event.c","function":"xf_event_ConfigureNotify"}},{"id":"CVE-2026-27951-1d0b71d4","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/remdesk/server/remdesk_main.c","function":"remdesk_recv_ctl_authenticate_pdu"},"deprecated":false,"digest":{"function_hash":"178339460280426501033426770575402443388","length":1121}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/Windows/wf_cliprdr.c"},"deprecated":false,"digest":{"line_hashes":["40917209178582018649122867646860600733","305939713394255667425965292060142697538","223477192002354967314134435401595189279","233738527351157863444376367817444083424","26895685021890485676458955523489482579","230007125265975478927070422364250739045","326919856318679270779664530627821421321"],"threshold":0.9},"id":"CVE-2026-27951-22dd09fe","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/Android/Studio/freeRDPCore/src/main/cpp/android_event.c","function":"android_push_event"},"deprecated":false,"digest":{"function_hash":"109202020365285281314082536833740126102","length":548},"id":"CVE-2026-27951-2505bb0c","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/tsmf/client/tsmf_media.c","function":"tsmf_presentation_find_by_id"},"deprecated":false,"digest":{"function_hash":"263845545971624531039094730048176583180","length":580},"id":"CVE-2026-27951-291bd0cf","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/X11/xf_event.c"},"deprecated":false,"digest":{"line_hashes":["105656891968892417464193158234852766431","122389884289021719945124480260064610339","76643276389368812752798570175243653921","230270054159349689134300678918357496599","285072943279897994382352877121516476092","33081956043704981201418634732430482142","249088360346382583424437500464526561448"],"threshold":0.9},"id":"CVE-2026-27951-2a139b9a","signature_type":"Line"},{"id":"CVE-2026-27951-2d208069","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"GetCurrentDirectoryW"},"deprecated":false,"digest":{"function_hash":"143447346960134207978477158302047395267","length":107}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"function":"GetCommandLineA","file":"winpr/libwinpr/environment/environment.c"},"deprecated":false,"digest":{"function_hash":"166713682638915397237849750264721977975","length":90},"id":"CVE-2026-27951-32503f74"},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/ncrypt/ncrypt_pkcs11.c"},"deprecated":false,"digest":{"line_hashes":["110025965480730736545340255846853482799","54926196975472170255700984385271102374","251701324364149146504218382867062918953","62473644155648337038370739859096796152","231891706875555966856012011121908111917","210974204673789597865954484821456969902","115604066793508651928459854847867061535"],"threshold":0.9},"id":"CVE-2026-27951-33ce27ac","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/remdesk/server/remdesk_main.c","function":"remdesk_recv_ctl_remote_control_desktop_pdu"},"deprecated":false,"digest":{"function_hash":"217600151352849184571831797848077088561","length":782},"id":"CVE-2026-27951-37c2b464"},{"target":{"file":"winpr/libwinpr/environment/environment.c","function":"SetCurrentDirectoryA"},"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-398ed30c","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"length":520,"function_hash":"303691763315126739158492623702649411424"},"id":"CVE-2026-27951-39ef08b5","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/remdesk/common/remdesk_common.c","function":"remdesk_write_channel_header"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/PubSub.c","function":"PubSub_AddEventTypes"},"deprecated":false,"digest":{"function_hash":"328379517503724548823884855254760458435","length":605},"id":"CVE-2026-27951-3b0bd495","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"NeedCurrentDirectoryForExePathW"},"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-3be47b4e"},{"deprecated":false,"digest":{"line_hashes":["28044534167599419405572335158139222952","177878294593472927720780120291104943361","101987488470962920730389758817955168839","190177242593193030420087566046955087878","178117109262225189898042434531861394441","160840323524456211967138754555848343641","43183471156667106820666086819071372567","83893032311961575094656485467296185468"],"threshold":0.9},"id":"CVE-2026-27951-3ca25b2a","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/ncrypt/ncrypt.c"}},{"deprecated":false,"digest":{"function_hash":"70610144908542753629165619611399388761","length":517},"id":"CVE-2026-27951-3dd6ee22","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/Stack.c","function":"Stack_Push"}},{"id":"CVE-2026-27951-3f5ab3de","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/path/include/PathAllocCombine.h"},"deprecated":false,"digest":{"line_hashes":["334830958507322970495842640716576851782","124578745735026452679992814287744078301","247020343939475902560731040817029593926","271061919832576683984196224898438245246","234800032481943877227979143295875820351","156863306127954808273424029822085736766","63978978991976042291482195025902494053","90425809733016354417829226894749360230","334830958507322970495842640716576851782","97572140209159642433817174580878185495","92518777379000287706577615885371402468","90425809733016354417829226894749360230"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"270001077791296161980767084405232410882","length":165},"id":"CVE-2026-27951-4142993f","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SearchPathW"}},{"digest":{"function_hash":"70810460242511880256146047978805962489","length":6153},"id":"CVE-2026-27951-43e2d235","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/sspi/NTLM/ntlm_message.c","function":"ntlm_write_AuthenticateMessage"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"247800345393363536074963905464514709074","length":737},"id":"CVE-2026-27951-49a260ac","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"GetEnvironmentStringsA"}},{"deprecated":false,"digest":{"function_hash":"166713682638915397237849750264721977975","length":90},"id":"CVE-2026-27951-4b604c7b","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"GetCommandLineW"}},{"deprecated":false,"digest":{"length":170,"function_hash":"319597842582191340818007121532288988012"},"id":"CVE-2026-27951-5503bdb1","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/core/orders.c","function":"update_approximate_create_offscreen_bitmap_order"}},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/Android/Studio/freeRDPCore/src/main/cpp/android_event.c"},"deprecated":false,"digest":{"line_hashes":["217876139995242908827933177551218041686","218568875811598253986076881765340016788","273839654003420124136378643082484881214","293690490373136270747834597233771261826","121059598718753783731026970934745937051","32299833852493912721082739260182329516","93190492773291274824289514092632613814"],"threshold":0.9},"id":"CVE-2026-27951-55c3f100","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/MessageQueue.c","function":"MessageQueue_EnsureCapacity"},"deprecated":false,"digest":{"length":690,"function_hash":"324061614431234265692379546742763959498"},"id":"CVE-2026-27951-56853f61"},{"deprecated":false,"digest":{"line_hashes":["126503312431911906334530571909637792257","192536617161054550656397353658191335635","52307385432361560621130930513075525266","331762317553273664051228332191000303090"],"threshold":0.9},"id":"CVE-2026-27951-5dd0ad9b","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/crt/buffer.c"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/clipboard/synthetic_file.c","function":"convert_filedescriptors_to_file_list"},"deprecated":false,"digest":{"function_hash":"274211484018000626369244634696479808158","length":3160},"id":"CVE-2026-27951-67135653","signature_type":"Function","signature_version":"v1"},{"target":{"file":"libfreerdp/core/gcc.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["14674768921741453713685888089727258859","52419866023015846634152313733176551867","137024348977266683721952832369125515250","152348601108635122622626113606331467180"]},"id":"CVE-2026-27951-6dfa0c51","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"line_hashes":["66801359282627750299109280026278595198","173295430746377819595902468032467125917","291904983982523700715474709930450592378","171025199128654641503763166048579765888"],"threshold":0.9},"id":"CVE-2026-27951-6e6b7778","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/remdesk/common/remdesk_common.c"}},{"target":{"file":"winpr/libwinpr/file/file.c"},"deprecated":false,"digest":{"line_hashes":["207481196013341818921184071798286237561","304540780793635403535360251922870168140","325221533009665347341475810289905140056","311501168660997059740249800009489198940"],"threshold":0.9},"id":"CVE-2026-27951-70606dc6","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/file/file.c","function":"GetFullPathNameA"},"deprecated":false,"digest":{"function_hash":"329336452146443008082301955394730878638","length":569},"id":"CVE-2026-27951-731a2879","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-27951-737ecaf3","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/ncrypt/ncrypt_pkcs11.c","function":"NCryptP11EnumKeys"},"deprecated":false,"digest":{"function_hash":"221533349011509703007328306252614085943","length":4417}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/Stack.c"},"deprecated":false,"digest":{"line_hashes":["316369064124170075079377439403513176430","33841363487432764591052243549865128601","255912186472816785075912115805630798524","126413975537067057169318941594245673843","255786590258029125935222853060830368858","177471350451493073108399319660962569909"],"threshold":0.9},"id":"CVE-2026-27951-76c99c6b"},{"id":"CVE-2026-27951-7a678623","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/core/gcc.c","function":"gcc_write_server_network_data"},"deprecated":false,"digest":{"function_hash":"22986105597617176376963396203989838588","length":642}},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"GetEnvironmentVariableW"},"deprecated":false,"digest":{"function_hash":"307489981403057503377261206232747159925","length":159},"id":"CVE-2026-27951-7ba96a26","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"120384230905979183830476639245299775003","length":3031},"id":"CVE-2026-27951-7ea6e552","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/tsmf/client/ffmpeg/tsmf_ffmpeg.c","function":"tsmf_ffmpeg_decode_audio"}},{"digest":{"line_hashes":["84449407361577620836631894186363190971","294458103769520214920333495858867373812","208413785703454447189527163127382337881","185490909881567819272480138700721387758","179617631939119893242175823870367926973","230296362808988877026195635987766864613","267103238135973313222830061668321894525"],"threshold":0.9},"id":"CVE-2026-27951-80a68d28","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/sspi/NTLM/ntlm_message.c"},"deprecated":false},{"target":{"file":"winpr/libwinpr/utils/collections/BufferPool.c"},"deprecated":false,"digest":{"line_hashes":["333365254317832850358061095660593244708","295340215688229481934752746990086243532","310114080361997727032531984629650482619","19199333564565787649667211761188924225","176057272323468282810367929332692707048","333925680939354136156716392255915977040"],"threshold":0.9},"id":"CVE-2026-27951-8205adc7","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"function_hash":"257306164322542230842847971548800077692","length":918},"id":"CVE-2026-27951-83591254","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/BufferPool.c","function":"BufferPool_ShiftUsed"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/PubSub.c"},"deprecated":false,"digest":{"line_hashes":["320529173944648413430179483834046168330","216523174471714897992948563188916211834","142531587376292705430636239538035266436","79101101708129876889182365322162076155","160534985011526784636977464255918149385","85459337490502715267678916271824504342","183138285991780730307535211482439618029","195849077577414633397283797111172426716","294729524626548147865817375822934817381"],"threshold":0.9},"id":"CVE-2026-27951-8895988b"},{"target":{"file":"channels/remdesk/server/remdesk_main.c"},"deprecated":false,"digest":{"line_hashes":["160804349204596138604996782688138600774","70435016253626246645183566254399768066","168785874982404400596473446133304006074","38534312458747398948261421784336289171","303927356701646198591539651630463986071","263445461024473817748504149147656342156","69808715796197449278307427938143517104","1949543503367533953969817906267261795"],"threshold":0.9},"id":"CVE-2026-27951-893f1885","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"function_hash":"9926036609161397354060294537280191326","length":3331},"id":"CVE-2026-27951-91c3c883","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/core/proxy.c","function":"http_proxy_connect"}},{"target":{"file":"winpr/tools/makecert/makecert.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["322025437087592853302175183497724358096","33783719328905526609784410263053861895","196676463972717997214622839288916804732","210337748250785727016342036675865303054","142070540541091754112548949296954388572","215598988877291105361350490991400652498","298979116741198997660535495501858878974","217602704301472629253454436031666957163","6675498011878007986413663995987433250"]},"id":"CVE-2026-27951-9659eaa0","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"line_hashes":["113117167187489313888618386719534806003","287257928780621718306861918163814182540","209862805711851631929067480909234602893","132771747951087333439449130479703595248"],"threshold":0.9},"id":"CVE-2026-27951-9bf23906","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/core/orders.c"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/ncrypt/ncrypt.c","function":"NCryptEnumStorageProviders"},"deprecated":false,"digest":{"length":792,"function_hash":"295594958612652548049585271833360721020"},"id":"CVE-2026-27951-a31b2838","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"144018888731241689112941707574289798609","length":111},"id":"CVE-2026-27951-a77f9308","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SetEnvironmentVariableW"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SearchPathA"},"deprecated":false,"digest":{"function_hash":"270001077791296161980767084405232410882","length":165},"id":"CVE-2026-27951-a7e42eaa","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SetEnvironmentStringsA"},"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-a928e201"},{"target":{"file":"winpr/libwinpr/utils/collections/ObjectPool.c"},"deprecated":false,"digest":{"line_hashes":["190682475116211527458903701093586911397","249777610475635281849264138667349304552","248646901947592306631780448848677407920","101919816200557304785424597455794344415","300655711784534259819224231832630213278","192986014931380936293419360484003837020","34160768039539364665477474784907781843","290246619254900591939156435572805334016","137198010021017936375769532105461073702"],"threshold":0.9},"id":"CVE-2026-27951-a94bdb7a","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"function_hash":"167944834649758089402464114129131462243","length":96},"id":"CVE-2026-27951-ac5cfe90","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"SetEnvironmentStringsW"}},{"target":{"file":"winpr/libwinpr/utils/stream.c"},"deprecated":false,"digest":{"line_hashes":["16743107833426318439649819131046453641","312334371933439766665480800440749777061","102378948988260070374732337365331210468","14614847750389109782114947025901622545","204985343015824077805012672126280454401","68472066793279799251992268365661849421","6137085985956556433123403430506549502","281183256384285590203276685649751633232","12797168628228453951087670999986968960","189855373207988699703800883638025539990","283148944855588792756160500065981094870","332327243758072760701059585967222372994","56851769767066966295638500493937773542","8100165441822207312286702669251926491"],"threshold":0.9},"id":"CVE-2026-27951-ac64d759","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113"},{"deprecated":false,"digest":{"line_hashes":["34942870499929734875672171448591485794","239612487589311999616974681082461132091","195695569258831005334091749785323812782","262474086925096596124452943720537310190"],"threshold":0.9},"id":"CVE-2026-27951-b12c7ce0","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/drive/client/drive_file.c"}},{"digest":{"threshold":0.9,"line_hashes":["277227327965363983336707730805562511034","137897643461338071986397088397657110222","119151315746971026332767240431684165033","5623782529321305226745335539420616460","20625607678579228137573263055336681505","75872733034024973836465222608817581892","83550264811869352716731076918391436353"]},"id":"CVE-2026-27951-b30f228b","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/urbdrc/client/libusb/libusb_udevice.c"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/MessageQueue.c"},"deprecated":false,"digest":{"line_hashes":["137291832606971824126406778540305227529","88235108925484610496776958059474666300","272177937668968548970883927684798715924","158682740324604326761999982883380954925","131622372515761469469104505052355401550","101547175484107009488215819366244284951","334998248779438539535359525569637388132","302286360816625691042819088073636506292","20949013566420247244808911711786223304","150670551603311521669205577056359937547","284389523278273665729972571505690895937"],"threshold":0.9},"id":"CVE-2026-27951-b45b1c42"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/clipboard/synthetic_file.c"},"deprecated":false,"digest":{"line_hashes":["317971575731353504027690849189244246013","117192168479802860043995607275369601664","259532134773447882221745959256045350960","83865587109333707565197875937710795575"],"threshold":0.9},"id":"CVE-2026-27951-ba90019d"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/drive/client/drive_file.c","function":"drive_file_query_directory"},"deprecated":false,"digest":{"function_hash":"150843136150797197505609593998100602163","length":1253},"id":"CVE-2026-27951-cb0bac03","signature_type":"Function"},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/collections/ObjectPool.c","function":"ObjectPool_Return"},"deprecated":false,"digest":{"function_hash":"76122471706858595424546541034383431211","length":520},"id":"CVE-2026-27951-cb6c90d1","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/tools/makecert/makecert.c","function":"makecert_read_str"},"deprecated":false,"digest":{"function_hash":"188187301260721636998919444342049641942","length":827},"id":"CVE-2026-27951-cc04659f","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["114180662961412449597691494780538647112","287641842706126352332984917256522822699","225147730903183905988284713620838665045","295983517697772210364463329205062154405"],"threshold":0.9},"id":"CVE-2026-27951-cf93e4fe","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/crypto/base64.c"}},{"deprecated":false,"digest":{"line_hashes":["101263585363637420706336060585559986023","277555386055559330297708858276924258057","171914615025703224746700232529765580154","58701005572385295076876161900724457883","216999850319587209477087533265007702936","141994889749739345612703348334238881216","177200877778616616275148729252361474788"],"threshold":0.9},"id":"CVE-2026-27951-d18764e4","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"channels/tsmf/client/ffmpeg/tsmf_ffmpeg.c"}},{"id":"CVE-2026-27951-d3523049","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c","function":"GetEnvironmentStringsW"},"deprecated":false,"digest":{"function_hash":"166713682638915397237849750264721977975","length":90}},{"deprecated":false,"digest":{"line_hashes":["153604464277026470466852195434133338127","302193454816519783149416353267212749074","289114792497366132428752725468671599500","33154303652716306462568389651089006047","22760988839626138971311278322543645759","5437850289410970941355243857243256912","132636808302312720820615294967065120076","254367210739884822379704376165590891173","160639506755773306315410432520900296550","320196781997657874783020130906444351461","104265725641281144726532034363375841258","261186941391806842453385815490473955114","224730210906090435239625772698756059011","86965366422629257326563535608967371914","149195611251834528711660143106365331308","104265725641281144726532034363375841258","159986009167518418012649827080877379133","212380286053912148182208999427452052116","319494701986200709835143781693555958043","5437850289410970941355243857243256912","45438722007559846759069367930724637587","1479048743617754871463707302384133498","134274770307160098012948944321996964983","5437850289410970941355243857243256912","337545005253418154582389087567806463618","261267456112828167882751213706452739427","311382627899676340233169970019324263824","251919166989035570696494345572441738077","121402156947723898452394664961892782579","172480069750035284702663788950680643541","219327600101989124211403184220716671843","240033205992058508328372411489692356960","43173389137171624615886422511195866267","121402156947723898452394664961892782579","3368669076768504769918617487783128249","104055333611629204133824693126137139830","11078212312822240939665410409698896560","260488389421941794413713270091487194221","104265725641281144726532034363375841258","142266132192118705801092261644189339821","231330253587242261391469319629978767538","102508808866911756741922237970780243995","151767220652063895410696374701279024078","104265725641281144726532034363375841258","12864978465172524822127546221402920964","12091426657796448591754575063866186478","254658113290526878849977271795280690607","38633493507209616777844304583040145302","272019957012047312451606194123423927344","253931169588214494729309590252401197611","21132751247371698398800257951894554669","23733551060217620838839955830097531638","44551679791830078059080294386773687799","332340925393179520791778450422507886525","119323763723092052697842522131791009281","160283626859790683725432697383518048180","164753529222141414133230316039832589129","160517962584849738817393950505488365293","230308886013279802278579984349739327640","62223798524399182223121572038121616202","187711916878575765112604571545230903905","278250184796674631663900671861599080019","167907507274646501995425310575646967182","123046046443043965974905897081292858873","300504330868179281292829617699526477612","301491785851765027289926287414495593568","222438014877791702548415163453148563480","331306876988646047907884233947951756551","268154772935890521879605895918589796534","153802303195382321472963821998897440643","255319009923520425333739638191898939260","36017449400257873498427582554463540761","151718582810522699589627402348371625387","172971216209144021914978349522532097568","233062833920663820086052458274675846033","77636896926365657671805798648648831865","273102363644052485583530655717456850002","64040647330132004685200316070579811758","181060266422564579219007629946197200352","191633589268325023593749964776000742990","155206282448249160995905995184494474317","24183897281696105175743755301747698098","106900440079479804260374863495062591020","171728804145690796063651739616277031256","54543204166685297067317321922364339661","280365271694604044277003730196049687806","121402156947723898452394664961892782579","266594876804266116551345768104235532711","314725994738302292602352748054844550064","316670664006860764004766245264441285521","203624051382335101355344418296805315575","104265725641281144726532034363375841258","135126583804095215115980026357548046120","238606869582852100768451418523242864256","269299972448417695001569478393983097185","114699816721706290710261222150116170836","104265725641281144726532034363375841258","6862496352920331609066247592584767267","194648931166269403503454658895356624260","82383992004294319907205591027267267203","46859277620425152962294264939405200225","101231186457587675102182520027332870096","5437850289410970941355243857243256912","150409709647459331208583921549752801928","111972507436333822156846582373019056759","137242385024053594381152843460912741976","278904534776012364969801163625663513647","101231186457587675102182520027332870096","5437850289410970941355243857243256912","315191448576154850478409121591094548629"],"threshold":0.9},"id":"CVE-2026-27951-d59d0004","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/environment/environment.c"}},{"source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"libfreerdp/core/proxy.c"},"deprecated":false,"digest":{"line_hashes":["236815362229187437839249264715908364099","190351483640466039817178918978692004088","329271997886203330099864034260543871388","126534826413971049789537032321161764480"],"threshold":0.9},"id":"CVE-2026-27951-d8a94e94","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"251718245518851546694016966271477072237","length":708},"id":"CVE-2026-27951-dae9b0e1","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/utils/stream.c","function":"Stream_EnsureCapacity"}},{"deprecated":false,"digest":{"function_hash":"9709324876941263774982313220227708174","length":349},"id":"CVE-2026-27951-dc61de0b","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"client/Windows/wf_cliprdr.c","function":"map_ensure_capacity"}},{"deprecated":false,"digest":{"function_hash":"83381584106433253864119372640360682728","length":176},"id":"CVE-2026-27951-ff651b4d","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113","target":{"file":"winpr/libwinpr/crt/buffer.c","function":"wmemmove_s"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}