Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24684 FreeRDP Use-After-Free Vulnerability in RDPSND Async Playback Thread Before 3.22.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24684
Post summary
A use‑after‑free vulnerability in FreeRDP’s RDPSND async playback thread before 3.22.0 is disclosed; no PoC, exploit, or patch details are included.
CVE-2026-24684 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed… https://www.cve.org/CVERecord?id=CVE-2026-24684
Post summary
CVE-2026-24684 describes a flaw in FreeRDP where the RDPSND async playback thread processes queued PDUs after the channel has been closed, affecting versions before 3.22.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freerdp | freerdp | - | - | - |