FreeRDP clients before 3.32.2 suffer a use‑after‑free condition that arises when an RDP server can race the RDPGFX ResetGraphics handler against the planar bitmap decoder. By sending a ResetGraphics command while the client is concurrently processing compressed bitmaps of 32 bpp or more, an attacker can force the client to free memory that is still in use, or read/write beyond the bounds of shared planar buffers. The result is heap corruption that could lead to arbitrary code execution, denial of service, or other severe client‑side compromise. This flaw is categorized as CWE‑362, a race condition.

FreeRDP, through the FreeRDP client component, is affected in all releases prior to 3.32.2. Users running version 3.32.1 or earlier, irrespective of platform, are vulnerable unless an upgrade or patch is applied.

The CVSS score of 8.7 indicates high severity. Although no EPSS score is available, the lack of a KEV listing suggests no widely‑known exploitation yet, but the vulnerability remains readily exploit‑able by any RDP server that can control a client session. The attack vector is remote: a malicious server can trigger the race by sending crafted ResetGraphics commands over the network to a connected client. Successful exploitation requires the victim to establish an RDP session with the attacker, which is typical for remote desktop attacks.