CVE-2026-109946

The FreeRDP client versions 3.11.0 before 3.32.0 are vulnerable to a reachable assertion (CWE-617) during YUV444 conversion. The software fails to validate that AVC444 and AVC444v2 region widths are even numbers. A malicious or compromised RDP server can trigger a client crash by sending an in-bo...