CVE-2026-111373 | FreeRDP up to 3.31.x WebSocket Transport websocket_reply_pong null pointer dereference

October 16, 2026 Yanac

A vulnerability labeled as problematic has been found in FreeRDP up to 3.31.x. The impacted element is the function websocket_reply_pong of the component WebSocket Transport. The manipulation results in null pointer dereference.

This vulnerability is reported as CVE-2026-111373. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More