NULL Pointer Dereference in FreeRDP Affected by ARM Endpoint Response
CVE-2026-109679
6MEDIUM
What is CVE-2026-109679?
FreeRDP versions prior to 3.32.0 contain a vulnerability in the arm_handle_request_ok function. This flaw can be exploited when an ARM endpoint unexpectedly returns an empty HTTP 200 body, leading to a NULL pointer dereference. This issue enables attackers controlling the ARM gateway to send a zero-length response, which can cause the connecting client to crash, resulting in potential service disruption.
Affected Version(s)
FreeRDP 3.0.0-beta4 < 3.32.0
FreeRDP 3.32.0
References
CVSS V4
Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Kushalkhemka
opensec-intelligence
mayank-jangid-moon
skigeek16