关键信息 CVE ID: CVE-2026-23732 Severity: Moderate Package: FreeRDP (C) Affected Versions: <= 3.20.2 Patched Versions: 3.21.0 Weaknesses: CWE-122 Reporter: ehdgks0627 Summary FastGlyph parsing trusts /remaining length and never validates against the minimum size implied by . Details sets with no validation against the size required by . passes the glyph directly into when . does not check consistency when allocating exactly bytes and copying data. reads from , so immediately triggers an out-of-bounds (OOB) condition. PoC AddressSanitizer