CVE-2026-24684 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is…
High CVSS: 8.7

CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.
Vendor
Freerdp
Product
Freerdp
CWE
CWE-416
Yayın Tarihi
2026-02-09 19:15:50
Güncelleme
2026-02-10 15:02:32
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-416 Freerdp HIGH Freerdp 2026

Referanslar

https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q