Cross-Thread Use-After-Free Vulnerability in FreeRDP by FreeRDP Project
CVE-2026-121398

8.2HIGH

Key Information:

Vendor

Freerdp

Status
Freerdp
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121398?

FreeRDP versions prior to 3.32.2 are susceptible to a cross-thread use-after-free vulnerability within the dyn-channel-dump module during the session teardown process. This flaw may allow a malicious RDP target to send dynamic channel data while a client is disconnecting, potentially leading to the client thread accessing freed ChannelData and causing the proxy process to terminate unexpectedly. This vulnerability underscores the need for timely updates and robust security practices to safeguard against potential exploitation.

Affected Version(s)

FreeRDP 0 < 3.32.2

FreeRDP 3.32.2

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/freerdp-before-3.32....
third-party-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kushalkhemka
mayank-jangid-moon
opensec-intelligence
.