CVE-2026-121957
highFreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics han…
FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/freerdp-before-3.32.2-use-after-free-via-rdpgfx-reset... disclosure@vulncheck.com
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g 134c704f-9b21-4f2e-91b3-4a467353bcc0