FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.29.0, planar_decompress_plane_rle and planar_decompress_plane_rle_only in libfreerdp/codec/planar.c verify that a control byte exists but do not verify that the source buffer contains the zero to fifteen raw bytes declared by that control byte. A malicious RDP server can send a truncated planar bitmap or surface update whose final control byte claims additional raw bytes, causing the decoder to read beyond pSrcData while processing a color plane. This can crash the client and may disclose adjacent memory. This issue is fixed in version 3.29.0.
This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-69159 as REJECTED on . It is no longer considered a valid vulnerability record. The original content below is preserved for historical reference only.
Reason given by MITRE
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplicate of CVE-2026-67306. Notes: All CVE users should reference CVE-2026-67306 instead of this candidate.
CVE-2026-69159
✕ Withdrawn — historical dataMEDIUMPre-NVD 5.4
5.4CVSS
- CVSS v3
- 5.4
- EchelonGraph score
- Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
- EPSS PROB
- —
- EPSS %ILE
- —
- KEV
- —Not applicable: this CVE ID was withdrawn
Published
August 19, 2026
Last Modified
August 19, 2026
References (4)
- security-advisories@githubhttps://github.com/FreeRDP/FreeRDP/commit/75a1ec61d444179ea64a4ec0835214cb9c4f7c18
- security-advisories@githubhttps://github.com/FreeRDP/FreeRDP/pull/13016
- security-advisories@githubhttps://github.com/FreeRDP/FreeRDP/releases/tag/3.29.0
- security-advisories@githubhttps://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qrxx-7g3c-j6w3
Frequently asked(4)
What is CVE-2026-69159?
CVE-2026-69159 is a rejected CVE ID: its record was withdrawn on August 21, 2026 and no longer describes a vulnerability. Reason given: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplicate of CVE-2026-67306. Notes: All CVE users should reference CVE-2026-67306 instead of this candidate. Its record names CVE-2026-67306 as the replacement.
When was the CVE record for CVE-2026-69159 published?
The CVE record for CVE-2026-69159 was published on August 19, 2026. EchelonGraph's copy of the record carries a last-modified date of August 19, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-69159?
CVE-2026-69159 has a CVSS base score of 5.4 (a secondary CVSS source that NVD displays; NVD's own analysis pending).
How do I remediate CVE-2026-69159?
There is nothing to remediate under CVE-2026-69159: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability. Its record names CVE-2026-67306 as the replacement; act on that CVE instead.