CVE-2026-109257

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0

Description A double-free issue exists in the nsc context initialize encode() function. This occurs when a partial buffer growth failure leaves dangling plane pointers. A remote attacker can use a specially crafted RDP client to negotiate NSCodec with a large desktop geometry, triggering an allocation failure that crashes the server during context teardown.

Recommendations Update to version 3.32.0 or later.