← Database

CVE-2026-91954

MEDIUM CVSS: 6.5 Published: 2026-09-15 Modified: 2026-09-17

Description

FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabled.

Affected Platforms

Unknown

Weakness Type

CWE-476

References