CVE-2026-67306 | FreeRDP up to 3.28.0 RDP6 Planar RLE Bitmap Decoder planar.c out-of-bounds (EUVD-2026-51835 / Nessus ID 331625)

A vulnerability classified as problematic was found in FreeRDP up to 3.28.0. This affects the function planar_decompress_plane_rle/planar_decompress_plane_rle_only of the file libfreerdp/codec/planar.c of the component RDP6 Planar RLE Bitmap Decoder. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-67306. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.