CVE-2026-22857 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by ir…
Medium CVSS: 6.8

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by irp->Complete() and then accessed again on the error path. This vulnerability is fixed in 3.20.1.
Vendor
Freerdp
Product
Freerdp
CWE
CWE-416
Yayın Tarihi
2026-01-14 18:16:43
Güncelleme
2026-01-20 18:34:43
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-416 Freerdp MEDIUM Freerdp 2026

Referanslar

https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gxq-jhq6-4cr8