NIXPKGS-2026-0202
GitHub issue
published on 10 Feb 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
FreeRDP has a Heap-use-after-free in play_thread
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q x_refsource_CONFIRM
- https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 x_refsource_MISC
- https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 x_refsource_MISC
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcgv-xgjp-h83q x_refsource_CONFIRM
- https://github.com/FreeRDP/FreeRDP/commit/622bb7b4402491ca003f47472d0e478132673696 x_refsource_MISC
- https://github.com/FreeRDP/FreeRDP/commit/afa6851dc80835d3101e40fcef51b6c5c0f43ea5 x_refsource_MISC
Affected products
FreeRDP
- ==< 3.22.0
Package maintainers
-
@peterhoeg Peter Hoeg <peter@hoeg.com>