{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964) · updates",
  "home_page_url": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves",
  "feed_url": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves/feed.json",
  "description": "FreeRDP, the open-source RDP client, server and proxy library used by Remmina, GNOME Connections and many Linux desktops and thin clients, shipped 3.32.2 as a security release that hardens it against malicious client and server messages, with more than 40 GitHub advisories. CVE records for them were published on November 3 and 4. CVE-2026-121392 (CVSS 4.0 9.1) lets a man-in-the-middle holding a certificate from any client-trusted CA bypass server identity checks in tls_verify_certificate and intercept RDP sessions. CVE-2026-121953 (9.3) is a use-after-free in the client's rdpgfx channel that a malicious RDP server can trigger to crash the client or potentially execute code, and CVE-2026-121952 (9.3) is an out-of-bounds write in freerdp-proxy reachable by a connecting client. The rest are heap overflows, use-after-frees, a Kerberos double free and denial-of-service bugs, most needing the user to connect to a malicious or compromised server. Update FreeRDP to 3.32.2 or your distribution's patched package.",
  "language": "en",
  "_pwn": {
    "slug": "freerdp-3-32-2-memory-corruption-cert-bypass-cves",
    "severity": "high",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves/feed.xml",
    "llms": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves/llms.txt",
    "json": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-11-04-f6ff189b",
      "url": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-11-04-f6ff189b",
      "title": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): CVE records CVE-2026-121950 to CVE-2026-121964 are published for heap overflows, use-after-frees and denial-of-service bugs fixed in 3.32.2.",
      "content_text": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): CVE records CVE-2026-121950 to CVE-2026-121964 are published for heap overflows, use-after-frees and denial-of-service bugs fixed in 3.32.2.\n\nSource: https://www.cve.org/CVERecord?id=CVE-2026-121953",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://www.cve.org/CVERecord?id=CVE-2026-121953",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-11-03-90574b0f",
      "url": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-11-03-90574b0f",
      "title": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): CVE-2026-121392, a certificate identity validation bypass in tls_verify_certificate, is published.",
      "content_text": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): CVE-2026-121392, a certificate identity validation bypass in tls_verify_certificate, is published.\n\nSource: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262",
      "date_published": "2026-11-03T00:00:00.000Z",
      "external_url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-10-12-1e0773ec",
      "url": "https://pwn.watch/i/freerdp-3-32-2-memory-corruption-cert-bypass-cves#2026-10-12-1e0773ec",
      "title": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): FreeRDP releases 3.32.2 as a regression, bugfix and security release listing more than 40 GitHub security advisories.",
      "content_text": "FreeRDP 3.32.2 fixes a batch of heap overflows, use-after-frees and a certificate validation bypass (CVE-2026-121392, CVE-2026-121950 to CVE-2026-121964): FreeRDP releases 3.32.2 as a regression, bugfix and security release listing more than 40 GitHub security advisories.\n\nSource: https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2",
      "date_published": "2026-10-12T00:00:00.000Z",
      "external_url": "https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2",
      "tags": [
        "high"
      ]
    }
  ]
}