Ecosystem	Package	Version

Vulnerabilities

CVE-2026-24681

CVE-2026-24681

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urb_write_completion. This vulnerability is fixed in 3.22.0.

Published Feb 10, 2026

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ccvv-hg2w-6x9j

CVSS ScoreHigh

7.5

Ecosystem	Package	Version


nuget	FreeRDP	2.0.0.10
nuget	FreeRDP	2.0.0.11
nuget	FreeRDP	2.0.0.12
nuget	FreeRDP	2.0.0.13
nuget	FreeRDP	2.0.0.1
nuget	FreeRDP	2.0.0.2
nuget	FreeRDP	2.0.0.3
nuget	FreeRDP	2.0.0.4
nuget	FreeRDP	2.0.0.5
nuget	FreeRDP	2.0.0.6
nuget	FreeRDP	2.0.0.7
nuget	FreeRDP	2.0.0.8
nuget	FreeRDP	2.0.0.9
nuget	FreeRDP	2.0.0
nuget	FreeRDP-Sharp.Native	1.1.0
nuget	FreeRDP-Sharp.Native	1.1.1
rpm	freerdp	1.0.2-1.el5
rpm	freerdp	1.0.2-1.el6
rpm	freerdp	1.0.2-10.el7
rpm	freerdp	1.0.2-15.el7
rpm	freerdp	1.0.2-15.el7_6.1
rpm	freerdp	1.0.2-2.el6
rpm	freerdp	1.0.2-5.el6
rpm	freerdp	1.0.2-5.el7
rpm	freerdp	1.0.2-5.el7_1.1
rpm	freerdp	1.0.2-6.el6
rpm	freerdp	1.0.2-6.el7_2.1
rpm	freerdp	1.0.2-7.el6_10
rpm	freerdp	2.0.0-1.rc4.el7
rpm	freerdp	2.0.0-2.rc4.el7_8
rpm	freerdp	2.0.0-4.rc4.el7_8.1
rpm	freerdp	2.0.0-4.rc4.el7_8
rpm	freerdp	2.1.1-2.el7
rpm	freerdp	2.1.1-5.el7_9
rpm	freerdp	2
rpm	freerdp-debuginfo	1.0.2-1.el5
rpm	freerdp-debuginfo	1.0.2-1.el6
rpm	freerdp-devel	1.0.2-1.el5
rpm	freerdp-devel	1.0.2-1.el6
rpm	freerdp-devel	1.0.2-10.el7
rpm	freerdp-devel	1.0.2-15.el7
rpm	freerdp-devel	1.0.2-15.el7_6.1
rpm	freerdp-devel	1.0.2-2.el6
rpm	freerdp-devel	1.0.2-5.el6
rpm	freerdp-devel	1.0.2-5.el7
rpm	freerdp-devel	1.0.2-5.el7_1.1
rpm	freerdp-devel	1.0.2-6.el6
rpm	freerdp-devel	1.0.2-6.el7_2.1
rpm	freerdp-devel	1.0.2-7.el6_10
rpm	freerdp-devel	2.0.0-1.rc4.el7

CVE-2026-24681 | Components Impacted | Sonatype Guide | Sonatype Guide