CVE-2026-121957

FreeRDP before version 3.32.2 is vulnerable to a use-after-free condition caused by a race condition in the RDPGFX ResetGraphics handler. A malicious RDP server can trigger this by concurrently sending ResetGraphics commands and compressed bitmaps of 32 bpp or more , leading to heap use-after-fre...