medium5.3
CVE-2026-109252
FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via …
Impact
FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB_RPC_INTERNAL_NAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names pointer, causing cleanup to dereference a null base and terminate the client.
Affected products
| Product | Affected versions |
|---|---|
| FreeRDP From 3.9.0 | before 3.32.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.