akallabeth

57 exploits Active since May 2020
CVE-2026-24678 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Use-After-Free in ecam_channel_write
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.
CVSS 7.5
CVE-2026-24679 WRITEUP CRITICAL WRITEUP
FreeRDP < 3.22.0 - Heap-based Buffer Overflow in URBDRC Client Interface Handling
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, causing an out-of-bounds read in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0.
CVSS 9.1
CVE-2026-24680 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Use-After-Free in sdl_Pointer_New
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0.
CVSS 7.5
CVE-2026-24681 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Use-After-Free in URBDRC Channel Callback
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.
CVSS 7.5
CVE-2026-24682 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Heap-based Buffer Overflow in audin_server_recv_formats
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), leading to out-of-bounds access in audio_formats_free. This vulnerability is fixed in 3.22.0.
CVSS 7.5
CVE-2026-24683 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Use-After-Free in ainput_send_input_event
FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This vulnerability is fixed in 3.22.0.
CVSS 7.5
CVE-2026-24684 WRITEUP HIGH WRITEUP
FreeRDP < 3.22.0 - Use-After-Free in RDPSND Async Playback Thread
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.
CVSS 7.5