CVE-2026-109240

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.11.0 through 3.32.0

Description A reachable assertion issue exists in the urb isoch transfer function. A malicious RDP server can cause the client to crash by sending unvalidated OutputBufferSize values. Specifically, an attacker can send a TS URB ISOCH TRANSFER IN-direction request via URBDRC with an OutputBufferSize exceeding INT32 MAX, which triggers an assertion in libusb udev isoch transfer and terminates the client process.

Recommendations Update FreeRDP to version 3.32.1.