PT-2026-111531 · Freerdp+1 · Freerdp
CVSS v4.0
6.0
Medium
| Vector | AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions 3.0.0-beta4 through 3.31.0
Description
A NULL pointer dereference occurs in the
arm handle request ok() function when an ARM endpoint returns an empty HTTP 200 body. An attacker controlling the configured ARM gateway can return a zero-length body, which causes a NULL value to be passed to strnlen(), resulting in a crash of the connecting client.Recommendations
Update FreeRDP to version 3.32.0 or later.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp