CVE-2026-91946: Use of Uninitialized Resource

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function...

PT-2026-92065

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An information disclosure issue exists in the RDPGFX server's ResetGraphics PDU serializer. The component fails to initialize padding bytes within the fixed 340-byte wire format. This allows attacke...