PT-2026-137011

FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket context read that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS close notify, causing a client thread to spin and consume CPU unti...