CVE-2026-125394 | FreeRDP up to 3.32.9 GDI Update use after free

A vulnerability was found in FreeRDP up to 3.32.9. It has been rated as critical. The affected element is the function update_gdi_patblt/update_gdi_polygon_cb/update_gdi_mem3blt of the component GDI Update. Performing a manipulation results in use after free.

This vulnerability is identified as CVE-2026-125394. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More