CVE-2026-25955: Freerdp Rdpgfx Missing Unmap Window For Surface Callbackcve-2026-25955-freerdp-rdpgfx-missing-unmap-window-for-surface-callback
RdpgfxClientContext registers UpdateWindowFromSurface but does not register UnmapWindowForSurface in the same initializer. UpdateWindowFromSurface caches an XImage whose data pointer aliases the RDPGFX surface buffer; without an UnmapWindowForSurface callback to invalidate that cached alias before the surface backing buffer is freed by gdi_DeleteSurface, a m
