CVE-2026-24684

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-24684
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 Patch
https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 Patch
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*
History

17 Jun 2026, 10:23

Type Values Removed Values Added
Summary
  • (es) FreeRDP es una implementación gratuita del Protocolo de Escritorio Remoto. Antes de 3.22.0, el hilo de reproducción asíncrono de RDPSND puede procesar PDUs en cola después de que el canal se cierra y el estado interno se libera, lo que lleva a un uso después de la liberación en rdpsnd_treat_wave. Esta vulnerabilidad está corregida en 3.22.0.

10 Feb 2026, 15:02

Type Values Removed Values Added
References () https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 - () https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 - Patch
References () https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 - () https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 - Patch
References () https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q - () https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q - Patch, Vendor Advisory
CPE cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
First Time Freerdp
Freerdp freerdp

09 Feb 2026, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-09 19:15

Updated : 2026-06-17 10:23

NVD link : CVE-2026-24684

Mitre link : CVE-2026-24684

CVE.ORG link : CVE-2026-24684

JSON object : View

Products Affected

freerdp

  • freerdp
CWE
CWE-416

Use After Free