FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` dereferences a freed `xfAppWindow` pointer because `xf_rail_get_window` in `xf_rail_server_min_max_info` returns an unprotected pointer from the `railWindows` hash table, and the main thread can concurrently delete the window (via a window delete order) while the RAIL channel thread is still using the pointer. Version 3.23.0 fixes the issue.
CVSS Details
- CVSS 4.0 Base Score: 5.5 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdp-libsUpgrade freerdp-develUpgrade freerdpUpgrade libwinprUpgrade libwinpr-devel | May 12, 2026 | May 11, 2026 |
| Alpine Linux | — | Upgrade freerdp | Mar 2, 2026 | Feb 25, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwinprUpgrade freerdp-develUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdpUpgrade freerdp-libs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-serverUpgrade freerdp-libs | Apr 7, 2026 | Feb 25, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-server | May 13, 2026 | Feb 25, 2026 |
| Redhat_linux | — | Upgrade libwinpr-develUpgrade freerdp-server-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdpUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-libsUpgrade freerdp-develNo solution existsUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-server | May 12, 2026 | Feb 25, 2026 |
| Rocky_linux | — | Upgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-serverUpgrade libwinprUpgrade freerdp-debugsourceUpgrade freerdp-libs-debuginfoUpgrade freerdp-server-debuginfoUpgrade libwinpr-develUpgrade freerdpUpgrade libwinpr-debuginfo | May 14, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3 | Mar 19, 2026 | Feb 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub