CVE-2026-121398 — Vulnerability intelligence
freerdp — freerdp
Published:
- CVSS
- 8.2
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during session teardown. A malicious RDP target can send dynamic channel data while the front client disconnects, letting the client thread read freed ChannelData and crash the proxy process.