A vulnerability, which was classified as critical, was found in FreeRDP up to 3.20.x. The affected element is an unknown function of the component ClearCodec. Such manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2026-23534. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.