CVE-2026-33516— xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-33516
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers
Source: NVD (National Vulnerability Database)
Vulnerability Description
xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validating the remaining buffer length. A remote, unauthenticated attacker can trigger this vulnerability by sending a specially crafted Confirm Active PDU. Successful exploitation could lead to a denial of service (process crash) or potential disclosure of sensitive information from the process memory. This issue has been fixed in version 0.10.6.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
xrdp 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
xrdp是neutrinolabs开源的一款开源远程桌面协议服务器。 xrdp 0.10.5及之前版本存在安全漏洞，该漏洞源于RDP能力交换阶段存在越界读取，可能导致拒绝服务或泄露进程内存中的敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| neutrinolabs | xrdp | < 0.10.6 | - |
II. Public POCs for CVE-2026-33516
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-33516
请登录查看更多情报信息。
- Release xrdp v0.10.6 · neutrinolabs/xrdp · GitHubx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2026-33516
Same Patch Batch · neutrinolabs · 2026-04-17 · 8 CVEs total
| CVE-2026-32107 | 8.8 HIGH | xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid |
| CVE-2026-33145 | 6.3 MEDIUM | xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman |
| CVE-2026-35512 | xrdp: Heap buffer overflow in EGFX channel | |
| CVE-2026-32105 | xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in no | |
| CVE-2026-32624 | xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length | |
| CVE-2026-32623 | xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly | |
| CVE-2026-33689 | xrdp: Pre-authentication out-of-bounds reads in channel parsers |
IV. Related Vulnerabilities
Same product: xrdp
- CVE-2026-35512
xrdp: Heap buffer overflow in EGFX channel - CVE-2026-33689
xrdp: Pre-authentication out-of-bounds reads in channel pars - CVE-2026-33145
xrdp: Authenticated RCE via unsanitized AlternateShell execu - CVE-2026-32624
xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() - CVE-2026-32623
xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
Same vendor: neutrinolabs
- CVE-2026-35512
xrdp: Heap buffer overflow in EGFX channel - CVE-2026-33689
xrdp: Pre-authentication out-of-bounds reads in channel pars - CVE-2026-33145
xrdp: Authenticated RCE via unsanitized AlternateShell execu - CVE-2026-32624
xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() - CVE-2026-32623
xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
Same weakness: CWE-125
- CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bou - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-3508
ASUS System Control Interface 缓冲区错误漏洞
V. Comments for CVE-2026-33516
No comments yet