Medium severity5.9NVD Advisory· Published Oct 12, 2026

CVE-2026-109254

Description

FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining play_thread. A malicious RDP server can disconnect while asynchronous Wave2 playback processes queued PDUs, causing the client to read freed heap memory and crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Freerdp/Freerdpllm-fuzzy
Range: <3.32.0

Patches

Vulnerability mechanics

References

github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vqxm-9w7c-hvvxnvd
www.vulncheck.com/advisories/freerdp-2.1.0-before-3.32.0-use-after-free-via-rdpsnd-disconnect-pathnvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000