Live › vulnerability › CVE-2026-111373
Go to dashboardFreeRDP before 3.32.0 dereferences a NULL stream in its websocket transport when a gateway sends a zero-length ping. The assertion failure terminates the client process, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Clients older than 3.32.0 that connect to RDP servers through a websocket gateway are exposed, because the malicious party has to be the gateway the client talks to. Direct RDP connections that do not use the websocket transport are not described as affected. Teams that only run servers or use a different FreeRDP build can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| freerdp | vendor | < 3.32.0 | 3.32.0 |
xfreerdp --version or sdl-freerdp --version, and look for versions below 3.32.0.3.32.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocket_reply_pong passes a nullptr stream to websocket_reply_close, triggering an assertion failure that terminates the client process and causes denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-111373")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.