All vulnerabilities
CVE-2026-109241GHSA-x7v7-9jp5-wqj2

FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP FreeRDP
Open in ThreatlineRecord JSON
CVSS
2.3Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.22%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3.32.0Fixed versionCVE List
Published12 Oct 2026Updated 18 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation->geometry, then send VideoData that dereferences it, causing client denial of service.

Text from CVE List

Affected versions 2

  • FreeRDPaffected: all versions before 3.32.0CVE List
  • FreeRDPunaffected: 3.32.0CVE List

References 2