CyberRota Analysis
AI-GeneratedFreeRDP versions prior to 3.32.0 are susceptible to a NULL pointer dereference vulnerability in the client video redirection channel, which can be exploited by malicious servers to crash clients through out-of-order messages. Specifically, attackers can trigger a denial of service by sending a Geometry CLEAR message followed by VideoData that dereferences a null pointer. Organizations using FreeRDP should prioritize patching to mitigate this low-severity risk, particularly those relying on video redirection features.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation->geometry, then send VideoData that dereferences it, causing client denial of service.