DEBIAN-CVE-2026-109257

FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...

CVE-2026-109257

FreeRDP versions before 3.32.0 are susceptible to a double-free vulnerability within the nsc_context_initialize_encode() function. The root cause is a partial buffer growth failure that leaves dangling plane pointers. An attacker can exploit this by using a crafted RDP client to negotiate NSCodec...

EUVD-2026-97701

FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...