CVE-2026-24681
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.
Vendor
Product
CWE
Yayın Tarihi
2026-02-09 19:15:49
Güncelleme
2026-02-10 15:06:04
Source Identifier
security-advisories@github.com
KEV Date Added
-