CVE-2026-121963
Undergoing Analysis Undergoing Analysis - In Progress

Use-After-Free in FreeRDP via rdpsnd Channel

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: VulnCheck

Description
FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback thread reads the freed callback in rdpsnd_virtual_channel_write, crashing the client.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-121963
EUVD
EUVD-2026-116963

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FreeRDP FreeRDP 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeRDP before version 3.32.2 has a use-after-free flaw in the asynchronous dynamic rdpsnd channel. Malicious RDP servers can exploit this by sending a training PDU, then closing the channel while audio PDUs are queued. This causes the playback thread to access a freed callback in rdpsnd_virtual_channel_write, leading to a client crash.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes or unusual behavior in FreeRDP clients, particularly when connecting to untrusted RDP servers. Check logs for segmentation faults or application crashes during RDP sessions. No specific commands are provided in the context.

Impact Analysis

If you use FreeRDP as a client to connect to untrusted RDP servers, attackers could crash your application by exploiting this flaw. This may lead to denial-of-service conditions, disrupting remote desktop sessions or applications relying on FreeRDP.

Mitigation Strategies

Immediately update FreeRDP to version 3.32.2 or later to patch the use-after-free vulnerability. Avoid connecting to untrusted RDP servers until patched. Monitor vendor advisories for additional guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121963. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...