A vulnerability categorized as problematic has been discovered in FreeRDP up to 3.31.x. Impacted is the function winpr_convert_from_jpeg of the component JPEG Conversion. The manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2026-110839. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.
Vulnerability
CVE-2026-110839
VulDB
Apply vendor security patch