Skip to content

Secure EU

Menu
  • Home
Menu

CVE-2026-24681 – FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb

Posted on February 9, 2026
CVE ID : CVE-2026-24681

Published : Feb. 9, 2026, 7:15 p.m. | 44 minutes ago

Description : FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Solution

©2026 Secure EU | Design: Newspaperly WordPress Theme