Threats affecting pkg:github/FreeRDP

CVE-2026-125394 is a heap use-after-free vulnerability in FreeRDP versions before 3.33.0. It occurs in functions handling graphical updates where stale brush cache pointers are retained. A malicious RDP server can exploit this by resending CACHE_BRUSH to the same slot and then sending PATBLT, causing the client to read freed heap memory, potentially leading to data disclosure or crashes.