CVE-2026-27951
- Source
- https://cve.org/CVERecord?id=CVE-2026-27951
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27951.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-27951
- Aliases
-
- GHSA-qcfc-ghxr-h927
- Downstream
- Related
- Published
- 2026-02-25T21:07:30.828Z
- Modified
- 2026-07-15T20:54:36.809600Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- FreeRDP has possible Integer overflow in Stream_EnsureCapacity
- Details
-
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function
Stream_EnsureCapacitycan create an endless blocking loop. This may affect all client and server implementations usingFreeRDP. For practical exploitation this will only work on 32bit systems where the available physical memory is>= SIZE_MAX. Version 3.23.0 contains a patch. No known workarounds are available. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-190" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27951.json" }- References
Affected packages
Git / github.com/freerdp/freerdp
Affected ranges
- Type
- GIT
- Repo
- https://github.com/freerdp/freerdp
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
{ "cpe": "cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*", "source": [ "CPE_RANGE", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "3.23.0" } ] }
Affected versions
1.*
1.0-beta1
1.0-beta2
1.0-beta4
1.0-beta5
1.0.0
1.0.1
1.1.0-beta+2013071101
1.1.0-beta1
1.1.0-beta1+android2
1.1.0-beta1+android3
1.1.0-beta1+android4
1.1.0-beta1+android5
1.1.0-beta1+ios1
1.1.0-beta1+ios2
1.1.0-beta1+ios3
1.1.0-beta1+ios4
1.2.0-beta1+android7
1.2.0-beta1+android9
2.*
2.0.0
2.0.0-beta1+android10
2.0.0-beta1+android11
2.0.0-rc0
2.0.0-rc1
2.0.0-rc2
2.0.0-rc3
2.0.0-rc4
3.*
3.0.0
3.0.0-beta1
3.0.0-beta2
3.0.0-beta3
3.0.0-beta4
3.0.0-rc0
3.1.0
3.2.0
3.3.0
3.4.0
3.5.0
3.5.1
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27951.json"
vanir_signatures_modified
"2026-07-15T20:54:36Z"
vanir_signatures
[
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-04050588",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "NeedCurrentDirectoryForExePathA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-06796f1d",
"digest": {
"length": 121.0,
"function_hash": "126192986776363007155856615511098306567"
},
"target": {
"function": "ExpandEnvironmentStringsA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-0c7bafca",
"digest": {
"length": 2185.0,
"function_hash": "141545325157747395915588133740475331475"
},
"target": {
"function": "libusb_udev_control_query_device_text",
"file": "channels/urbdrc/client/libusb/libusb_udevice.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-0cf8e350",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "SetCurrentDirectoryW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-15286b8c",
"digest": {
"length": 121.0,
"function_hash": "126192986776363007155856615511098306567"
},
"target": {
"function": "ExpandEnvironmentStringsW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-18fbeb6f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"82694106547016604061191583540658016577",
"299582216557497919568902859882013258053",
"41410525597239800729591348613312781136",
"208493919059511475829498012206457679020"
]
},
"target": {
"file": "channels/tsmf/client/tsmf_media.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-1b610b2e",
"digest": {
"length": 2211.0,
"function_hash": "103873336758953371091189265992184861450"
},
"target": {
"function": "xf_event_ConfigureNotify",
"file": "client/X11/xf_event.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-1d0b71d4",
"digest": {
"length": 1121.0,
"function_hash": "178339460280426501033426770575402443388"
},
"target": {
"function": "remdesk_recv_ctl_authenticate_pdu",
"file": "channels/remdesk/server/remdesk_main.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-22dd09fe",
"digest": {
"threshold": 0.9,
"line_hashes": [
"40917209178582018649122867646860600733",
"305939713394255667425965292060142697538",
"223477192002354967314134435401595189279",
"233738527351157863444376367817444083424",
"26895685021890485676458955523489482579",
"230007125265975478927070422364250739045",
"326919856318679270779664530627821421321"
]
},
"target": {
"file": "client/Windows/wf_cliprdr.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-2505bb0c",
"digest": {
"length": 548.0,
"function_hash": "109202020365285281314082536833740126102"
},
"target": {
"function": "android_push_event",
"file": "client/Android/Studio/freeRDPCore/src/main/cpp/android_event.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-291bd0cf",
"digest": {
"length": 580.0,
"function_hash": "263845545971624531039094730048176583180"
},
"target": {
"function": "tsmf_presentation_find_by_id",
"file": "channels/tsmf/client/tsmf_media.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-2a139b9a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"105656891968892417464193158234852766431",
"122389884289021719945124480260064610339",
"76643276389368812752798570175243653921",
"230270054159349689134300678918357496599",
"285072943279897994382352877121516476092",
"33081956043704981201418634732430482142",
"249088360346382583424437500464526561448"
]
},
"target": {
"file": "client/X11/xf_event.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-2d208069",
"digest": {
"length": 107.0,
"function_hash": "143447346960134207978477158302047395267"
},
"target": {
"function": "GetCurrentDirectoryW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-32503f74",
"digest": {
"length": 90.0,
"function_hash": "166713682638915397237849750264721977975"
},
"target": {
"function": "GetCommandLineA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-33ce27ac",
"digest": {
"threshold": 0.9,
"line_hashes": [
"110025965480730736545340255846853482799",
"54926196975472170255700984385271102374",
"251701324364149146504218382867062918953",
"62473644155648337038370739859096796152",
"231891706875555966856012011121908111917",
"210974204673789597865954484821456969902",
"115604066793508651928459854847867061535"
]
},
"target": {
"file": "winpr/libwinpr/ncrypt/ncrypt_pkcs11.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-37c2b464",
"digest": {
"length": 782.0,
"function_hash": "217600151352849184571831797848077088561"
},
"target": {
"function": "remdesk_recv_ctl_remote_control_desktop_pdu",
"file": "channels/remdesk/server/remdesk_main.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-398ed30c",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "SetCurrentDirectoryA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-39ef08b5",
"digest": {
"length": 520.0,
"function_hash": "303691763315126739158492623702649411424"
},
"target": {
"function": "remdesk_write_channel_header",
"file": "channels/remdesk/common/remdesk_common.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-3b0bd495",
"digest": {
"length": 605.0,
"function_hash": "328379517503724548823884855254760458435"
},
"target": {
"function": "PubSub_AddEventTypes",
"file": "winpr/libwinpr/utils/collections/PubSub.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-3be47b4e",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "NeedCurrentDirectoryForExePathW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-3ca25b2a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"28044534167599419405572335158139222952",
"177878294593472927720780120291104943361",
"101987488470962920730389758817955168839",
"190177242593193030420087566046955087878",
"178117109262225189898042434531861394441",
"160840323524456211967138754555848343641",
"43183471156667106820666086819071372567",
"83893032311961575094656485467296185468"
]
},
"target": {
"file": "winpr/libwinpr/ncrypt/ncrypt.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-3dd6ee22",
"digest": {
"length": 517.0,
"function_hash": "70610144908542753629165619611399388761"
},
"target": {
"function": "Stack_Push",
"file": "winpr/libwinpr/utils/collections/Stack.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-3f5ab3de",
"digest": {
"threshold": 0.9,
"line_hashes": [
"334830958507322970495842640716576851782",
"124578745735026452679992814287744078301",
"247020343939475902560731040817029593926",
"271061919832576683984196224898438245246",
"234800032481943877227979143295875820351",
"156863306127954808273424029822085736766",
"63978978991976042291482195025902494053",
"90425809733016354417829226894749360230",
"334830958507322970495842640716576851782",
"97572140209159642433817174580878185495",
"92518777379000287706577615885371402468",
"90425809733016354417829226894749360230"
]
},
"target": {
"file": "winpr/libwinpr/path/include/PathAllocCombine.h"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-4142993f",
"digest": {
"length": 165.0,
"function_hash": "270001077791296161980767084405232410882"
},
"target": {
"function": "SearchPathW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-43e2d235",
"digest": {
"length": 6153.0,
"function_hash": "70810460242511880256146047978805962489"
},
"target": {
"function": "ntlm_write_AuthenticateMessage",
"file": "winpr/libwinpr/sspi/NTLM/ntlm_message.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-49a260ac",
"digest": {
"length": 737.0,
"function_hash": "247800345393363536074963905464514709074"
},
"target": {
"function": "GetEnvironmentStringsA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-4b604c7b",
"digest": {
"length": 90.0,
"function_hash": "166713682638915397237849750264721977975"
},
"target": {
"function": "GetCommandLineW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-5503bdb1",
"digest": {
"length": 170.0,
"function_hash": "319597842582191340818007121532288988012"
},
"target": {
"function": "update_approximate_create_offscreen_bitmap_order",
"file": "libfreerdp/core/orders.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-55c3f100",
"digest": {
"threshold": 0.9,
"line_hashes": [
"217876139995242908827933177551218041686",
"218568875811598253986076881765340016788",
"273839654003420124136378643082484881214",
"293690490373136270747834597233771261826",
"121059598718753783731026970934745937051",
"32299833852493912721082739260182329516",
"93190492773291274824289514092632613814"
]
},
"target": {
"file": "client/Android/Studio/freeRDPCore/src/main/cpp/android_event.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-56853f61",
"digest": {
"length": 690.0,
"function_hash": "324061614431234265692379546742763959498"
},
"target": {
"function": "MessageQueue_EnsureCapacity",
"file": "winpr/libwinpr/utils/collections/MessageQueue.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-5dd0ad9b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126503312431911906334530571909637792257",
"192536617161054550656397353658191335635",
"52307385432361560621130930513075525266",
"331762317553273664051228332191000303090"
]
},
"target": {
"file": "winpr/libwinpr/crt/buffer.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-67135653",
"digest": {
"length": 3160.0,
"function_hash": "274211484018000626369244634696479808158"
},
"target": {
"function": "convert_filedescriptors_to_file_list",
"file": "winpr/libwinpr/clipboard/synthetic_file.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-6dfa0c51",
"digest": {
"threshold": 0.9,
"line_hashes": [
"14674768921741453713685888089727258859",
"52419866023015846634152313733176551867",
"137024348977266683721952832369125515250",
"152348601108635122622626113606331467180"
]
},
"target": {
"file": "libfreerdp/core/gcc.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-6e6b7778",
"digest": {
"threshold": 0.9,
"line_hashes": [
"66801359282627750299109280026278595198",
"173295430746377819595902468032467125917",
"291904983982523700715474709930450592378",
"171025199128654641503763166048579765888"
]
},
"target": {
"file": "channels/remdesk/common/remdesk_common.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-70606dc6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207481196013341818921184071798286237561",
"304540780793635403535360251922870168140",
"325221533009665347341475810289905140056",
"311501168660997059740249800009489198940"
]
},
"target": {
"file": "winpr/libwinpr/file/file.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-731a2879",
"digest": {
"length": 569.0,
"function_hash": "329336452146443008082301955394730878638"
},
"target": {
"function": "GetFullPathNameA",
"file": "winpr/libwinpr/file/file.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-737ecaf3",
"digest": {
"length": 4417.0,
"function_hash": "221533349011509703007328306252614085943"
},
"target": {
"function": "NCryptP11EnumKeys",
"file": "winpr/libwinpr/ncrypt/ncrypt_pkcs11.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-76c99c6b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316369064124170075079377439403513176430",
"33841363487432764591052243549865128601",
"255912186472816785075912115805630798524",
"126413975537067057169318941594245673843",
"255786590258029125935222853060830368858",
"177471350451493073108399319660962569909"
]
},
"target": {
"file": "winpr/libwinpr/utils/collections/Stack.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-7a678623",
"digest": {
"length": 642.0,
"function_hash": "22986105597617176376963396203989838588"
},
"target": {
"function": "gcc_write_server_network_data",
"file": "libfreerdp/core/gcc.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-7ba96a26",
"digest": {
"length": 159.0,
"function_hash": "307489981403057503377261206232747159925"
},
"target": {
"function": "GetEnvironmentVariableW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-7ea6e552",
"digest": {
"length": 3031.0,
"function_hash": "120384230905979183830476639245299775003"
},
"target": {
"function": "tsmf_ffmpeg_decode_audio",
"file": "channels/tsmf/client/ffmpeg/tsmf_ffmpeg.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-80a68d28",
"digest": {
"threshold": 0.9,
"line_hashes": [
"84449407361577620836631894186363190971",
"294458103769520214920333495858867373812",
"208413785703454447189527163127382337881",
"185490909881567819272480138700721387758",
"179617631939119893242175823870367926973",
"230296362808988877026195635987766864613",
"267103238135973313222830061668321894525"
]
},
"target": {
"file": "winpr/libwinpr/sspi/NTLM/ntlm_message.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-8205adc7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"333365254317832850358061095660593244708",
"295340215688229481934752746990086243532",
"310114080361997727032531984629650482619",
"19199333564565787649667211761188924225",
"176057272323468282810367929332692707048",
"333925680939354136156716392255915977040"
]
},
"target": {
"file": "winpr/libwinpr/utils/collections/BufferPool.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-83591254",
"digest": {
"length": 918.0,
"function_hash": "257306164322542230842847971548800077692"
},
"target": {
"function": "BufferPool_ShiftUsed",
"file": "winpr/libwinpr/utils/collections/BufferPool.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-8895988b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"320529173944648413430179483834046168330",
"216523174471714897992948563188916211834",
"142531587376292705430636239538035266436",
"79101101708129876889182365322162076155",
"160534985011526784636977464255918149385",
"85459337490502715267678916271824504342",
"183138285991780730307535211482439618029",
"195849077577414633397283797111172426716",
"294729524626548147865817375822934817381"
]
},
"target": {
"file": "winpr/libwinpr/utils/collections/PubSub.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-893f1885",
"digest": {
"threshold": 0.9,
"line_hashes": [
"160804349204596138604996782688138600774",
"70435016253626246645183566254399768066",
"168785874982404400596473446133304006074",
"38534312458747398948261421784336289171",
"303927356701646198591539651630463986071",
"263445461024473817748504149147656342156",
"69808715796197449278307427938143517104",
"1949543503367533953969817906267261795"
]
},
"target": {
"file": "channels/remdesk/server/remdesk_main.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-91c3c883",
"digest": {
"length": 3331.0,
"function_hash": "9926036609161397354060294537280191326"
},
"target": {
"function": "http_proxy_connect",
"file": "libfreerdp/core/proxy.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-9659eaa0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322025437087592853302175183497724358096",
"33783719328905526609784410263053861895",
"196676463972717997214622839288916804732",
"210337748250785727016342036675865303054",
"142070540541091754112548949296954388572",
"215598988877291105361350490991400652498",
"298979116741198997660535495501858878974",
"217602704301472629253454436031666957163",
"6675498011878007986413663995987433250"
]
},
"target": {
"file": "winpr/tools/makecert/makecert.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-9bf23906",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113117167187489313888618386719534806003",
"287257928780621718306861918163814182540",
"209862805711851631929067480909234602893",
"132771747951087333439449130479703595248"
]
},
"target": {
"file": "libfreerdp/core/orders.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-a31b2838",
"digest": {
"length": 792.0,
"function_hash": "295594958612652548049585271833360721020"
},
"target": {
"function": "NCryptEnumStorageProviders",
"file": "winpr/libwinpr/ncrypt/ncrypt.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-a77f9308",
"digest": {
"length": 111.0,
"function_hash": "144018888731241689112941707574289798609"
},
"target": {
"function": "SetEnvironmentVariableW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-a7e42eaa",
"digest": {
"length": 165.0,
"function_hash": "270001077791296161980767084405232410882"
},
"target": {
"function": "SearchPathA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-a928e201",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "SetEnvironmentStringsA",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-a94bdb7a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"190682475116211527458903701093586911397",
"249777610475635281849264138667349304552",
"248646901947592306631780448848677407920",
"101919816200557304785424597455794344415",
"300655711784534259819224231832630213278",
"192986014931380936293419360484003837020",
"34160768039539364665477474784907781843",
"290246619254900591939156435572805334016",
"137198010021017936375769532105461073702"
]
},
"target": {
"file": "winpr/libwinpr/utils/collections/ObjectPool.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-ac5cfe90",
"digest": {
"length": 96.0,
"function_hash": "167944834649758089402464114129131462243"
},
"target": {
"function": "SetEnvironmentStringsW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-ac64d759",
"digest": {
"threshold": 0.9,
"line_hashes": [
"16743107833426318439649819131046453641",
"312334371933439766665480800440749777061",
"102378948988260070374732337365331210468",
"14614847750389109782114947025901622545",
"204985343015824077805012672126280454401",
"68472066793279799251992268365661849421",
"6137085985956556433123403430506549502",
"281183256384285590203276685649751633232",
"12797168628228453951087670999986968960",
"189855373207988699703800883638025539990",
"283148944855588792756160500065981094870",
"332327243758072760701059585967222372994",
"56851769767066966295638500493937773542",
"8100165441822207312286702669251926491"
]
},
"target": {
"file": "winpr/libwinpr/utils/stream.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-b12c7ce0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"34942870499929734875672171448591485794",
"239612487589311999616974681082461132091",
"195695569258831005334091749785323812782",
"262474086925096596124452943720537310190"
]
},
"target": {
"file": "channels/drive/client/drive_file.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-b30f228b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277227327965363983336707730805562511034",
"137897643461338071986397088397657110222",
"119151315746971026332767240431684165033",
"5623782529321305226745335539420616460",
"20625607678579228137573263055336681505",
"75872733034024973836465222608817581892",
"83550264811869352716731076918391436353"
]
},
"target": {
"file": "channels/urbdrc/client/libusb/libusb_udevice.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-b45b1c42",
"digest": {
"threshold": 0.9,
"line_hashes": [
"137291832606971824126406778540305227529",
"88235108925484610496776958059474666300",
"272177937668968548970883927684798715924",
"158682740324604326761999982883380954925",
"131622372515761469469104505052355401550",
"101547175484107009488215819366244284951",
"334998248779438539535359525569637388132",
"302286360816625691042819088073636506292",
"20949013566420247244808911711786223304",
"150670551603311521669205577056359937547",
"284389523278273665729972571505690895937"
]
},
"target": {
"file": "winpr/libwinpr/utils/collections/MessageQueue.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-ba90019d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"317971575731353504027690849189244246013",
"117192168479802860043995607275369601664",
"259532134773447882221745959256045350960",
"83865587109333707565197875937710795575"
]
},
"target": {
"file": "winpr/libwinpr/clipboard/synthetic_file.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-cb0bac03",
"digest": {
"length": 1253.0,
"function_hash": "150843136150797197505609593998100602163"
},
"target": {
"function": "drive_file_query_directory",
"file": "channels/drive/client/drive_file.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-cb6c90d1",
"digest": {
"length": 520.0,
"function_hash": "76122471706858595424546541034383431211"
},
"target": {
"function": "ObjectPool_Return",
"file": "winpr/libwinpr/utils/collections/ObjectPool.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-cc04659f",
"digest": {
"length": 827.0,
"function_hash": "188187301260721636998919444342049641942"
},
"target": {
"function": "makecert_read_str",
"file": "winpr/tools/makecert/makecert.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-cf93e4fe",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114180662961412449597691494780538647112",
"287641842706126352332984917256522822699",
"225147730903183905988284713620838665045",
"295983517697772210364463329205062154405"
]
},
"target": {
"file": "libfreerdp/crypto/base64.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-d18764e4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"101263585363637420706336060585559986023",
"277555386055559330297708858276924258057",
"171914615025703224746700232529765580154",
"58701005572385295076876161900724457883",
"216999850319587209477087533265007702936",
"141994889749739345612703348334238881216",
"177200877778616616275148729252361474788"
]
},
"target": {
"file": "channels/tsmf/client/ffmpeg/tsmf_ffmpeg.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-d3523049",
"digest": {
"length": 90.0,
"function_hash": "166713682638915397237849750264721977975"
},
"target": {
"function": "GetEnvironmentStringsW",
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-d59d0004",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153604464277026470466852195434133338127",
"302193454816519783149416353267212749074",
"289114792497366132428752725468671599500",
"33154303652716306462568389651089006047",
"22760988839626138971311278322543645759",
"5437850289410970941355243857243256912",
"132636808302312720820615294967065120076",
"254367210739884822379704376165590891173",
"160639506755773306315410432520900296550",
"320196781997657874783020130906444351461",
"104265725641281144726532034363375841258",
"261186941391806842453385815490473955114",
"224730210906090435239625772698756059011",
"86965366422629257326563535608967371914",
"149195611251834528711660143106365331308",
"104265725641281144726532034363375841258",
"159986009167518418012649827080877379133",
"212380286053912148182208999427452052116",
"319494701986200709835143781693555958043",
"5437850289410970941355243857243256912",
"45438722007559846759069367930724637587",
"1479048743617754871463707302384133498",
"134274770307160098012948944321996964983",
"5437850289410970941355243857243256912",
"337545005253418154582389087567806463618",
"261267456112828167882751213706452739427",
"311382627899676340233169970019324263824",
"251919166989035570696494345572441738077",
"121402156947723898452394664961892782579",
"172480069750035284702663788950680643541",
"219327600101989124211403184220716671843",
"240033205992058508328372411489692356960",
"43173389137171624615886422511195866267",
"121402156947723898452394664961892782579",
"3368669076768504769918617487783128249",
"104055333611629204133824693126137139830",
"11078212312822240939665410409698896560",
"260488389421941794413713270091487194221",
"104265725641281144726532034363375841258",
"142266132192118705801092261644189339821",
"231330253587242261391469319629978767538",
"102508808866911756741922237970780243995",
"151767220652063895410696374701279024078",
"104265725641281144726532034363375841258",
"12864978465172524822127546221402920964",
"12091426657796448591754575063866186478",
"254658113290526878849977271795280690607",
"38633493507209616777844304583040145302",
"272019957012047312451606194123423927344",
"253931169588214494729309590252401197611",
"21132751247371698398800257951894554669",
"23733551060217620838839955830097531638",
"44551679791830078059080294386773687799",
"332340925393179520791778450422507886525",
"119323763723092052697842522131791009281",
"160283626859790683725432697383518048180",
"164753529222141414133230316039832589129",
"160517962584849738817393950505488365293",
"230308886013279802278579984349739327640",
"62223798524399182223121572038121616202",
"187711916878575765112604571545230903905",
"278250184796674631663900671861599080019",
"167907507274646501995425310575646967182",
"123046046443043965974905897081292858873",
"300504330868179281292829617699526477612",
"301491785851765027289926287414495593568",
"222438014877791702548415163453148563480",
"331306876988646047907884233947951756551",
"268154772935890521879605895918589796534",
"153802303195382321472963821998897440643",
"255319009923520425333739638191898939260",
"36017449400257873498427582554463540761",
"151718582810522699589627402348371625387",
"172971216209144021914978349522532097568",
"233062833920663820086052458274675846033",
"77636896926365657671805798648648831865",
"273102363644052485583530655717456850002",
"64040647330132004685200316070579811758",
"181060266422564579219007629946197200352",
"191633589268325023593749964776000742990",
"155206282448249160995905995184494474317",
"24183897281696105175743755301747698098",
"106900440079479804260374863495062591020",
"171728804145690796063651739616277031256",
"54543204166685297067317321922364339661",
"280365271694604044277003730196049687806",
"121402156947723898452394664961892782579",
"266594876804266116551345768104235532711",
"314725994738302292602352748054844550064",
"316670664006860764004766245264441285521",
"203624051382335101355344418296805315575",
"104265725641281144726532034363375841258",
"135126583804095215115980026357548046120",
"238606869582852100768451418523242864256",
"269299972448417695001569478393983097185",
"114699816721706290710261222150116170836",
"104265725641281144726532034363375841258",
"6862496352920331609066247592584767267",
"194648931166269403503454658895356624260",
"82383992004294319907205591027267267203",
"46859277620425152962294264939405200225",
"101231186457587675102182520027332870096",
"5437850289410970941355243857243256912",
"150409709647459331208583921549752801928",
"111972507436333822156846582373019056759",
"137242385024053594381152843460912741976",
"278904534776012364969801163625663513647",
"101231186457587675102182520027332870096",
"5437850289410970941355243857243256912",
"315191448576154850478409121591094548629"
]
},
"target": {
"file": "winpr/libwinpr/environment/environment.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-d8a94e94",
"digest": {
"threshold": 0.9,
"line_hashes": [
"236815362229187437839249264715908364099",
"190351483640466039817178918978692004088",
"329271997886203330099864034260543871388",
"126534826413971049789537032321161764480"
]
},
"target": {
"file": "libfreerdp/core/proxy.c"
},
"deprecated": false,
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-dae9b0e1",
"digest": {
"length": 708.0,
"function_hash": "251718245518851546694016966271477072237"
},
"target": {
"function": "Stream_EnsureCapacity",
"file": "winpr/libwinpr/utils/stream.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-dc61de0b",
"digest": {
"length": 349.0,
"function_hash": "9709324876941263774982313220227708174"
},
"target": {
"function": "map_ensure_capacity",
"file": "client/Windows/wf_cliprdr.c"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://github.com/freerdp/freerdp/commit/118afc0b954ba9d5632b7836ad24e454555ed113",
"id": "CVE-2026-27951-ff651b4d",
"digest": {
"length": 176.0,
"function_hash": "83381584106433253864119372640360682728"
},
"target": {
"function": "wmemmove_s",
"file": "winpr/libwinpr/crt/buffer.c"
},
"deprecated": false,
"signature_type": "Function"
}
]