CVE-2026-111373

A flaw was found in FreeRDP. A malicious gateway or remote server can trigger a Denial of Service DoS by sending a zero-length WebSocket ping message to a connected client. When processing this empty payload, the application encounters an invalid null memory reference, triggering an assertion...