Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23948 NULL Pointer Dereference in FreeRDP Proxy via Malformed LogonInfoV2 PDU https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23948
Post summary
The post announces CVE-2026-23948, a NULL pointer dereference vulnerability in FreeRDP Proxy, without any PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-23948 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malic… https://www.cve.org/CVERecord?id=CVE-2026-23948
Post summary
CVE-2026-23948 is a NULL pointer dereference in FreeRDP's rdp_write_logon_info_v2() affecting versions before 3.22.0, with no active exploitation or patch details reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |