CVE catalog

CVE-2026-24491

FreeRDP vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.53% · Oct 25, 2026

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreerdp2bookworm2.11.7+dfsg1-6~deb12u1vulnerable
Ubuntufreerdp2nobleNot reportedvulnerable
Ubuntufreerdp2noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntufreerdp3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp2-devnoble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntufreerdp2-shadow-x11noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntufreerdp2-waylandnoble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntufreerdp2-x11noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntufreerdp3-devnoble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp3-shadow-x11noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp3-waylandnoble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp3-x11noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibfreerdp-client2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibfreerdp-client3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibfreerdp-server2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibfreerdp-server3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibfreerdp-shadow-subsystem2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibfreerdp-shadow-subsystem3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibfreerdp-shadow2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibfreerdp-shadow3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibfreerdp2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibfreerdp3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibuwac0-0t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibuwac0-devnoble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibwinpr-tools2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibwinpr-tools3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibwinpr2-2t64noble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibwinpr2-devnoble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntulibwinpr3-3noble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntulibwinpr3-devnoble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntuwinpr-utilsnoble2.11.5+dfsg1-1ubuntu0.1~esm5fixed
Ubuntuwinpr3-utilsnoble3.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu2vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu3vulnerable
Ubuntufreerdp324.043.4.0+dfsg1-0ubuntu4vulnerable
Ubuntufreerdp324.043.5.0+dfsg1-0ubuntu1vulnerable
Ubuntufreerdp324.043.5.1+dfsg1-0ubuntu1vulnerable
Ubuntufreerdp324.043.5.1+dfsg1-0ubuntu1.1vulnerable
Ubuntufreerdp324.043.5.1+dfsg1-0ubuntu1.2fixed
Ubuntufreerdp325.103.14.0+dfsg-1ubuntu1vulnerable
Ubuntufreerdp325.103.15.0+dfsg-2.1vulnerable
Ubuntufreerdp325.103.16.0+dfsg-1ubuntu1vulnerable
Ubuntufreerdp325.103.16.0+dfsg-2vulnerable
Ubuntufreerdp325.103.16.0+dfsg-2ubuntu0.1fixed
Susefreerdplinux enterprise module for package hub 15 sp73.10.3-150700.3.9.1fixed
Susefreerdplinux enterprise workstation extension 15 sp73.10.3-150700.3.9.1fixed
Susefreerdp2linux enterprise module for package hub 15 sp72.11.7-150700.3.11.1fixed
Susefreerdp2linux enterprise workstation extension 15 sp72.11.7-150700.3.11.1fixed
Susefreerdplinux enterprise server 12 sp5-ltss2.1.2-12.60.1fixed
Susefreerdplinux enterprise server ltss extended security 12 sp52.1.2-12.60.1fixed
Opensusefreerdp2tumbleweed2.11.7-5.1fixed
Susefreerdplinux enterprise module for package hub 15 sp72.11.2-150600.4.15.1fixed
Opensusefreerdpleap 15.62.11.2-150600.4.15.1fixed
Susefreerdplinux enterprise module for package hub 15 sp72.4.0-150400.3.44.1fixed
Susefreerdplinux enterprise module for package hub 15 sp73.10.3-150700.3.6.1fixed
Susefreerdplinux enterprise workstation extension 15 sp73.10.3-150700.3.6.1fixed
Susefreerdplinux enterprise module for package hub 15 sp72.11.2-150600.4.9.1fixed
Opensusefreerdpleap 15.62.11.2-150600.4.9.1fixed
Susefreerdplinux enterprise module for package hub 15 sp72.4.0-150400.3.38.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreerdp2sourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntufreerdp2debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntufreerdp3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntufreerdp2-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntufreerdp2-shadow-x11debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntufreerdp2-waylanddebnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntufreerdp2-x11debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntufreerdp3-devdebnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntufreerdp3-shadow-x11debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntufreerdp3-waylanddebnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntufreerdp3-x11debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibfreerdp-client2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibfreerdp-client3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibfreerdp-server2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibfreerdp-server3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow-subsystem2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow-subsystem3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibfreerdp-shadow3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibfreerdp2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibfreerdp3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibuwac0-0t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibuwac0-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibwinpr-tools2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibwinpr-tools3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibwinpr2-2t64debnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibwinpr2-devdebnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntulibwinpr3-3debnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntulibwinpr3-devdebnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntuwinpr-utilsdebnoble2.11.5+dfsg1-1ubuntu0.1~esm5Not reportedNot reportedNot reported
Ubuntuwinpr3-utilsdebnoble3.5.1+dfsg1-0ubuntu1.2Not reportedNot reportedNot reported
Ubuntufreerdp3deb24.043.5.1+dfsg1-0ubuntu1.2Not reportedUBUNTU-CVE-2026-24491Not reported
Ubuntufreerdp3deb25.103.16.0+dfsg-2ubuntu0.1Not reportedUBUNTU-CVE-2026-24491Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp73.10.3-150700.3.9.1Not reportedSUSE-SU-2026:1398-1Not reported
Susefreerdprpmlinux enterprise workstation extension 15 sp73.10.3-150700.3.9.1Not reportedSUSE-SU-2026:1398-1Not reported
Susefreerdp2rpmlinux enterprise module for package hub 15 sp72.11.7-150700.3.11.1Not reportedSUSE-SU-2026:0968-1Not reported
Susefreerdp2rpmlinux enterprise workstation extension 15 sp72.11.7-150700.3.11.1Not reportedSUSE-SU-2026:0968-1Not reported
Susefreerdprpmlinux enterprise server 12 sp5-ltss2.1.2-12.60.1Not reportedSUSE-SU-2026:0969-1Not reported
Susefreerdprpmlinux enterprise server ltss extended security 12 sp52.1.2-12.60.1Not reportedSUSE-SU-2026:0969-1Not reported
Opensusefreerdp2rpmtumbleweed2.11.7-5.1Not reportedOPENSUSE-SU-2026:10243-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp72.11.2-150600.4.15.1Not reportedSUSE-SU-2026:0933-1Not reported
Opensusefreerdprpmleap 15.62.11.2-150600.4.15.1Not reportedSUSE-SU-2026:0933-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp72.4.0-150400.3.44.1Not reportedSUSE-SU-2026:0902-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp73.10.3-150700.3.6.1Not reportedSUSE-SU-2026:0763-1Not reported
Susefreerdprpmlinux enterprise workstation extension 15 sp73.10.3-150700.3.6.1Not reportedSUSE-SU-2026:0763-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp72.11.2-150600.4.9.1Not reportedSUSE-SU-2026:0649-1Not reported
Opensusefreerdprpmleap 15.62.11.2-150600.4.9.1Not reportedSUSE-SU-2026:0649-1Not reported
Susefreerdprpmlinux enterprise module for package hub 15 sp72.4.0-150400.3.38.1Not reportedSUSE-SU-2026:0621-1Not reported

Notes

[bookworm] freerdp2: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [freerdp2-dev]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [freerdp2-x11]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [libfreerdp2-2]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [libuwac0-0]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [libuwac0-dev]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [libwinpr2-2]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [libwinpr2-dev]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

  • [winpr-utils]Affected

    Source package: [freerdp2]

    Details (2)
    • 2.11.7+dfsg1-6~deb12u1 · amd64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

    • 2.11.7+dfsg1-6~deb12u1 · arm64 · bookworm

      Affected

      usn · freerdp2 · debian · bookworm; usn · freerdp2 · debian · 12

[openSUSE Tumbleweed]

  • Source package: [freerdp2]

    Details (1)
    • 2.11.7-8.4 · x86_64 · tumbleweed

      Unknown · Fixed: 2.11.7-5.1

      Version impact unknown

      usn · freerdp2 · opensuse · tumbleweed

  • Source package: [freerdp2]

    Details (1)
    • 2.11.7-8.4 · x86_64 · tumbleweed

      Unknown · Fixed: 2.11.7-5.1

      Version impact unknown

      usn · freerdp2 · opensuse · tumbleweed

  • Source package: [freerdp2]

    Details (1)
    • 2.11.7-8.4 · x86_64 · tumbleweed

      Unknown · Fixed: 2.11.7-5.1

      Version impact unknown

      usn · freerdp2 · opensuse · tumbleweed

  • [libfreerdp2-2]Unknown

    Source package: [freerdp2]

    Details (1)
    • 2.11.7-8.4 · x86_64 · tumbleweed

      Unknown · Fixed: 2.11.7-5.1

      Version impact unknown

      usn · freerdp2 · opensuse · tumbleweed

  • [libwinpr2-2]Unknown

    Source package: [freerdp2]

    Details (1)
    • 2.11.7-8.4 · x86_64 · tumbleweed

      Unknown · Fixed: 2.11.7-5.1

      Version impact unknown

      usn · freerdp2 · opensuse · tumbleweed

Next results

Observed:

References