Threats tagged 'ghsa-wc3j-h7qp-27j9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-125394FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and Medium5.32026-11-10GCVE DatabaseCVE-2026-125394 FreeRDP versions prior to 3.33.0 have a heap use-after-free vulnerability in several functions related to brush cache handling. A malicious RDP server can exploit this by resending CACHE_BRUSH to the same slot and then sending PATBLT, causing the client to read freed heap memory. This can lead to information disclosure or application crashes. Report on CVE-2026-125394 Vulnerability CWE-416 #ghsa-wc3j-h7qp-27j9	GCVE Database	2026-11-10

Page 1 of 1