FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereferences a freed `xfAppWindow` pointer during `HashTable_Free` cleanup because `xf_rail_window_common` calls `free(appWindow)` on title allocation failure without first removing the entry from the `railWindows` hash table, leaving a dangling pointer that is freed again on disconnect. Version 3.23.0 fixes the vulnerability.
CVSS Details
- CVSS 4.0 Base Score: 5.5 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr | May 12, 2026 | May 11, 2026 |
| Amazon Linux Ami 2 | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinpr | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade freerdpUpgrade libwinpr-develUpgrade libwinprUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-libsUpgrade freerdp-libs-debuginfoUpgrade freerdp-serverUpgrade freerdp-server-debuginfo | Apr 7, 2026 | Feb 25, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinprUpgrade freerdp-server | May 13, 2026 | Feb 25, 2026 |
| Redhat_linux | — | Upgrade freerdpUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdp-debuginfoUpgrade libwinpr-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdp-serverNo solution existsUpgrade freerdp-libs-debuginfo | May 12, 2026 | Feb 25, 2026 |
| Rocky_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-develUpgrade freerdp-server-debuginfoUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-debugsourceUpgrade freerdp-serverUpgrade freerdp | May 14, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3 | Mar 19, 2026 | Feb 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub