FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the device's MS config on error but later code still dereferences it, leading to a use after free in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0.
CVSS Details
- CVSS 4.0 Base Score: 7.7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade freerdpUpgrade libwinpr-develUpgrade libwinpr | Apr 3, 2026 | Apr 1, 2026 |
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Feb 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade libwinpr-develUpgrade freerdp | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdp-server-debuginfoUpgrade libwinprUpgrade freerdpUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-serverUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-libs | Mar 9, 2026 | Feb 9, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-server | Apr 2, 2026 | Feb 9, 2026 |
| Redhat_linux | — | Upgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdp-develNo solution existsUpgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-serverUpgrade freerdp-server-debuginfo | Apr 2, 2026 | Feb 9, 2026 |
| Rocky_linux | — | Upgrade freerdp-libs-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdp-serverUpgrade libwinprUpgrade freerdp-server-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-debugsource | Apr 8, 2026 | Apr 7, 2026 |
| Ubuntu | — | Upgrade libfreerdp2-2t64 (Ubuntu Pro)Upgrade libfreerdp2-2 (Ubuntu Pro)Upgrade freerdp2-x11Upgrade freerdp2-x11 (Ubuntu Pro)Upgrade freerdp3-x11Upgrade libfreerdp3-3Upgrade libfreerdp2-2 | Feb 17, 2026 | Feb 9, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub