4 matches found
CVE-2026-111373
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...
CVE-2026-111373
FreeRDP versions before 3.32.0 are vulnerable to a NULL pointer dereference within the websocket transport component. A malicious gateway can trigger this by sending zero-length pings ; specifically, when the payload length is zero, the websocket_reply_pong function passes a nullptr stream to web...
EUVD-2026-102554
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...
CVE-2026-111373 FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...