PT-2026-111534

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update read cache bitmap v3 order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3 DO NOT CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or...