Skip to content

Secure EU

Menu
  • Home
Menu

CVE-2026-24680 – FreeRDP has a heap-use-after-free in update_pointer_new(SDL)

Posted on February 9, 2026
CVE ID : CVE-2026-24680

Published : Feb. 9, 2026, 7:15 p.m. | 44 minutes ago

Description : FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Solution

©2026 Secure EU | Design: Newspaperly WordPress Theme