CVE-2026-121387

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.32.1

Description An out-of-bounds read occurs in the freerdp dsp decode gsm610() function. A malicious RDP server can trigger this by sending truncated GSM610 frames. Specifically, by negotiating GSM610 on rdpsnd and sending a WAVE2 message shorter than a 33- or 32-byte WAV49 frame, an attacker can cause the client to read past audio buffers, leading to a crash.

Recommendations Update FreeRDP to version 3.32.2.