Double-Free Vulnerability in FreeRDP Affects Remote Desktop Communication
CVE-2026-109257

8.2HIGH

Key Information:

Vendor

Freerdp

Status
Freerdp
Vendor
CVE Published:
12 October 2026

What is CVE-2026-109257?

The FreeRDP software prior to version 3.32.0 is susceptible to a double-free vulnerability in the function nsc_context_initialize_encode(). This flaw may occur when an attacker utilizing a specially crafted RDP client negotiates NSCodec with an unusually large desktop geometry. Such manipulation can lead to an allocation failure, leaving dangling pointers that may cause the server to crash during context teardown. This vulnerability poses significant risks to the stability and integrity of remote desktops, necessitating urgent attention and remediation.

Affected Version(s)

FreeRDP 0 < 3.32.0

FreeRDP 3.32.0

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/freerdp-before-3.32....
third-party-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

kimaiden1984-boop
.