Use-After-Free Vulnerability in FreeRDP by FreeRDP

CVE-2026-109254

What is CVE-2026-109254?

FreeRDP versions prior to 3.32.0 are affected by a use-after-free vulnerability within the static rdpsnd channel disconnect path. This flaw occurs when audio formats and devices are improperly deallocated without correctly synchronizing the play_thread, which can lead to scenarios where a malicious RDP server can sever the connection. During this disconnection, the client may still be processing audio data, resulting in arbitrary reads from freed heap memory and potentially crashing the application. Users are encouraged to upgrade to the latest version to mitigate this risk.

References