CVE-2026-25942 | FreeRDP up to 3.22.x xf_rail_server_execute_result execResult out-of-bounds (GHSA-78q6-67m7-wwf6 / Nessus ID 300275)

A vulnerability classified as problematic has been found in FreeRDP up to 3.22.x. Impacted is the function xf_rail_server_execute_result. Performing a manipulation of the argument execResult results in out-of-bounds read. This vulnerability was named CVE-2026-25942. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.