CVE-2026-109950

A flaw was found in FreeRDP. This vulnerability allows a malicious or compromised Remote Desktop (RD) Gateway to cause a Denial of Service (DoS) by crashing connecting client applications. By transmitting consent or service messages with mismatched length indicators, the gateway triggers an out-of-bounds read during character conversion, causing the client to terminate abnormally.

This flaw is rated Moderate because an out-of-bounds read via RD Gateway handling causes limited availability impact after the user connects (UI:R). Confidentiality and integrity are not impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid connecting through untrusted RD Gateway hosts. Restrict FreeRDP gateway use to trusted infrastructure.