CVE-2026-121963 in FreeRDP
Zusammenfassung
von MITRE • 04.11.2026
FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback thread reads the freed callback in rdpsnd_virtual_channel_write, crashing the client.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.