CVE-2026-109679

FreeRDP versions 3.0.0-beta4 before 3.32.0 are vulnerable to a NULL pointer dereference within the arm_handle_request_ok function. This issue occurs when a configured ARM gateway returns an empty HTTP 200 body, causing a zero-length body to pass a NULL value to strnlen . An attacker controlling t...