Use-After-Free Vulnerability in FreeRDP Affects Client Memory Integrity

CVE-2026-121957

What is CVE-2026-121957?

FreeRDP versions prior to 3.32.2 are susceptible to a use-after-free vulnerability that enables malicious RDP servers to exploit client memory corruption. The issue arises when an attacker races the RDPGFX ResetGraphics handler against the planar bitmap decoder. This can allow attackers to send a ResetGraphics command while simultaneously transmitting compressed bitmaps of 32 bpp or greater, resulting in heap use-after-free or unauthorized out-of-bounds read/write operations on shared planar buffers, thus compromising client applications and potentially leading to severe data breaches.

References