CVE-2026-23532 | FreeRDP up to 3.20.x gdi_SurfaceToSurface heap-based overflow (GHSA-fq8c-87hj-7gvr)

A vulnerability classified as critical has been found in FreeRDP up to 3.20.x. This vulnerability affects the function gdi_SurfaceToSurface. The manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-23532. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.