{"schema":"threatline.record/2","record":{"id":"GHSA-x7v7-9jp5-wqj2","aliases":["GHSA-x7v7-9jp5-wqj2"],"summary":"Client Video redirection channel NULL dereference","details":"### Impact\r\n\r\nClients crash with a NULL dereference if a server sends messages in wrong order.\r\n\r\n### Details\r\n\r\n```\r\nGeometry CREATE\r\n      |\r\n      v\r\npresentation->geometry = valid object\r\n      |\r\n      v\r\nGeometry CLEAR\r\n      |\r\n      v\r\nmappedGeometryUnref(...)\r\n      |\r\n      v\r\npresentation->geometry = nullptr\r\n      |\r\n      v\r\nsubsequent VideoData processing\r\n      |\r\n      v\r\ngeom = presentation->geometry\r\n      |\r\n      v\r\nframe / presentation processing\r\n      |\r\n      v\r\npotential NULL dereference\r\n```\r\n\r\n### Patches\r\n3.32.0\r\n\r\n### Workarounds\r\nDo not use `/video` client option\r\n","categories":["Unclassified"],"product":"FreeRDP","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2","source_modified_at":"2026-09-28T08:07:55Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"ecosystem":"c","name":"FreeRDP"},"range":"<= 3.31.1"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2","source_modified_at":"2026-09-28T08:07:55Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"ecosystem":"c","name":"FreeRDP"},"version":"3.32.0"}],"cvss":4.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-09-28T08:07:55Z","modified_at":"2026-09-28T08:07:55Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7v7-9jp5-wqj2","fetched_at":"2026-10-23T18:55:00.935475Z","source_modified_at":"2026-09-28T08:07:55Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-09-28T08:07:55Z","content_hash":"ad2c36b0d40c135de281980dc291a9c0f9f80ff06f83ba61313d2782939d9b7b"}}