Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-109943 →
DEBIAN-CVE-2026-109943
FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or Pol...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing polygon order followed by a zero-point order to crash a client with +async-update enabled.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
freerdp2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
freerdp3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
freerdp3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org