HIGHCVSS v3.1 7.5Vulnerability
CVE-2026-121957
FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more to trigger heap use-after-free or out-of-bounds read/write on shared planar buffers.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-04T17:37:42.865599+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.5
- Retrieved at
- 2026-11-04T17:38:51+00:00
- Score
- 7.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-121957
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- First seen by Signal
- 2026-11-04T17:38:51+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Published at
- 2026-11-04T16:17:48.423
- Last modified
- 2026-11-04T16:17:48.553
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph