Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-24675

FreeRDP has a Heap-use-after-free in urb_select_interface

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • < 3.22.0affected

References