FreeRDP clients before version 3.32.0 contain a NULL pointer dereference flaw in the video redirection channel. A malicious RDP server can send a Geometry CLEAR message that sets the client's presentation->geometry pointer to NULL. A subsequent VideoData message dereferences that NULL pointer, causing the client to crash. The crash results in a denial‑of‑service condition for the user session, but does not provide an attacker with code execution or data exfiltration capabilities. The CVSS score of 2.3 indicates a low‑severity impact.

All FreeRDP releases prior to 3.32.0 on client devices are vulnerable. The affected product is FreeRDP, the open source RDP client, and the vulnerability affects its video redirection channel across Windows, Linux, macOS, and other supported platforms. No specific sub‑versions are identified, so any build earlier than 3.32.0 should be considered at risk.

With a CVSS score of 2.3 the risk is classified as low. The EPSS score is currently unavailable, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a malicious RDP server that can send out‑of‑order packets, a scenario that typically occurs in environments where client connections to untrusted or compromised servers are allowed. The attack path is client‑side and leads only to a denial of service; it cannot be used to gain further access or execute arbitrary code.