CVE-2026-25955

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, "xfAppUpdateWindowFromSurface" reuses a cached "XImage" whose "data" pointer references a freed RDPGFX surface buffer, because "gdiDeleteSurface" frees "surface-data" without invalidating the "appWindow-imag...