CVE-2026-24682

HIGH

FreeRDP < 3.22.0 - Heap-based Buffer Overflow in audin_server_recv_formats

Title source: llm

Description

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an incorrect number of audio formats on parse failure (i + i), leading to out-of-bounds access in audio_formats_free. This vulnerability is fixed in 3.22.0.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vcw2-pqgw-mx6g

Patch x_refsource_misc

https://github.com/FreeRDP/FreeRDP/commit/1c5c74223179d425a1ce6dbbb6a3dd2a958b7aee

View Patch ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.0047

EPSS Percentile 36.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-122

Status published

Products (1)

freerdp/freerdp < 3.22.0

Published Feb 09, 2026

Tracked Since Feb 18, 2026