CVE-2026-121957

freerdp: freerdp: Memory corruption via race condition in planar bitmap decoding

freerdp

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.

4. Nov 2026

Ausgewertete Quellen

• Red Hat
  Red Hat
• Hinweis
  https://www.vulncheck.com/advisories/freerdp-before-3.32.2-use-after-free-via-rdpgfx-resetgraphics-race
• NVD
  CVE-2026-121957
• GitHub
  https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xjhw-2r55-m95g