PT-2026-3466 · Freerdp+4 · Freerdp+4
Ehdgks0627
·
Published
2026-01-01
·
Updated
2026-06-11
·
CVE-2026-23883
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.21.0
Description
FreeRDP, a free implementation of the Remote Desktop Protocol, contains a flaw where the
xf Pointer New function incorrectly frees memory associated with cursorPixels both on failure and during normal operation via pointer free and xf Pointer Free. This results in a use-after-free condition. A malicious server can exploit this to cause a client-side crash (Denial of Service) and potentially achieve heap corruption, which could lead to code execution depending on the system's memory allocator and heap layout. The vulnerable function is xf Pointer New.Recommendations
Update to version 3.21.0 or later.
Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp
Linuxmint
Red Os
Rocky Linux
Ubuntu