AIKIDO-2026-614714

TL;DR

FreeRDP's Kerberos SSPI decrypts a peer-supplied GSS Wrap token during CredSSP/NLA and validates the rotation count and total length but never bounds the extra-count EC field. The unbounded EC value is used directly in the pointer arithmetic that locates the encrypted regions, moving those pointers past the end of the token buffer before the in-place decrypt runs. A malicious peer can trigger out-of-bounds reads and in-place writes on the heap during Kerberos decryption. The fix rejects tokens whose EC would move the message pointers past the token buffer.