Skip to content

Secure EU

Menu
  • Home
Menu

CVE-2026-24683 – FreeRDP has a heap-use-after-free in ainput_send_input_event

Posted on February 9, 2026
CVE ID : CVE-2026-24683

Published : Feb. 9, 2026, 7:15 p.m. | 44 minutes ago

Description : FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This vulnerability is fixed in 3.22.0.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Solution

©2026 Secure EU | Design: Newspaperly WordPress Theme