https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T06:08:38.088465+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121957 fkie_cve-2026-121957 2026-11-07T06:08:38.092289+00:00

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.

 https://db.gcve.eu/vuln/ghsa-r7gw-v2vh-25mh GHSA-r7gw-v2vh-25mh 2026-11-07T06:08:38.092559+00:00

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-121957 UBUNTU-CVE-2026-121957 2026-11-07T06:08:38.092609+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.