medium5.3
CVE-2026-109679
FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body.
Impact
FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freerdp | Freerdp | after 3.0.0 before 3.32.0 Version 3.0.0 |