NVD security advisoryHigh
High advisory for FreeRDP
CVE-2026-121963 · Reported 4 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
FreeRDPAffected product
Advisory overview
FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback thread reads the freed callback in rdpsnd_virtual_channel_write, crashing the client.