CVE-2026-109679

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0-beta4 through 3.31.0

Description A NULL pointer dereference occurs in the arm handle request ok() function when an ARM endpoint returns an empty HTTP 200 body. An attacker controlling the configured ARM gateway can return a zero-length body, which causes a NULL value to be passed to strnlen(), resulting in a crash of the connecting client.

Recommendations Update FreeRDP to version 3.32.0 or later.