Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | Disclosure1 |
| 2026-02-10 | 1 | Disclosure1 |
| 2026-02-26 | 1 | General1 |
CVE-2026-24680 Use-After-Free Vulnerability in FreeRDP SDL Pointer Handling Before 3.22.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24680
Post summary
The text announces CVE-2026-24680, a use‑after‑free vulnerability in FreeRDP SDL pointer handling before version 3.22.0, without providing PoC, exploit, or patch details.
CVE-2026-24680 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and … https://www.cve.org/CVERecord?id=CVE-2026-24680
Post summary
The post discloses a technical flaw in FreeRDP’s SDL pointer handling in pre‑3.22.0 releases, but it does not mention any PoC, exploit, or patch.
CVE-2026-27950 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplet… https://www.cve.org/CVERecord?id=CVE-2026-27950
Post summary
The text references CVE-2026-27950 in FreeRDP, noting an incomplete fix for a heap‑use‑after‑free issue, but provides no evidence of PoC, exploit, active exploitation, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |