FreeRDP clients are vulnerable to an integer overflow when processing mapped‑video geometry coordinates sent by an RDP server. The overflow causes the client to abort abruptly, effectively terminating the RDP session. This flaw can be triggered by a malicious or compromised server once the client has connected and enabled video redirection; it does not require any local privilege escalation.

The vulnerability affects FreeRDP versions from 3.11.0 up to, but not including, 3.32.0. All installations using these client releases are susceptible when video redirection is enabled.

The flaw has a CVSS score of 7.1, indicating a moderate impact. No EPSS score is available, and it is not listed in CISA KEV. Attackers can exploit the issue by sending crafted geometry updates from a remote RDP server, which is a likely attack vector since the server controls the data sent to the client.