Vulnerability · Published Feb 9, 2026 · Assigned by GitHub_M
CVE-2026-24678FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread
Medium 5.3
In plain English
A medium-severity use-after-free in FreeRDP from FreeRDP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.7%top 46.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecam_channel_write. This vulnerability is fixed in 3.22.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | freerdp | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| AlmaLinux:10 | freerdp-devel | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| AlmaLinux:10 | freerdp-libs | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| AlmaLinux:10 | freerdp-server | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| AlmaLinux:10 | libwinpr | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| AlmaLinux:10 | libwinpr-devel | 2:3.10.3-5.el10_1.2 | ALSA-2026:3068 |
| Alpine:v3.23 | freerdp | 3.22.0-r0 | ALPINE-CVE-2026-24678 |
| Alpine:v3.24 | freerdp | 3.22.0-r0 | ALPINE-CVE-2026-24678 |
| Debian:12 | freerdp2 | no fix listed | DEBIAN-CVE-2026-24678 |
| Debian:13 | freerdp3 | 3.15.0+dfsg-2.1+deb13u1 | DEBIAN-CVE-2026-24678 |
| Debian:14 | freerdp3 | 3.22.0+dfsg-1 | DEBIAN-CVE-2026-24678 |
| Rocky Linux:10 | freerdp | 2:3.10.3-5.el10_1.2 | RLSA-2026:3068 |
| Ubuntu:22.04:LTS | freerdp2 | 2.6.1+dfsg1-3ubuntu2.10 | USN-8042-1 |
| Ubuntu:24.04:LTS | freerdp3 | 3.5.1+dfsg1-0ubuntu1.2 | USN-8042-1 |
| Ubuntu:25.10 | freerdp3 | 3.16.0+dfsg-2ubuntu0.1 | USN-8042-1 |
| Ubuntu:25.10 | freerdp3 | 3.16.0+dfsg-2ubuntu0.1 | UBUNTU-CVE-2026-24678 |
Affected products (as reported)
Weakness: CWE-416, CWE-825 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6gvg-29wx-6v7h x_refsource_CONFIRM
- https://github.com/FreeRDP/FreeRDP/commit/f3ab1a16139036179d9852745fdade18fec11600 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-24678 vdb-entry, x_refsource_REDHAT
- RHBZ#2438197 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24678.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:4121 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3068 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19033 vendor-advisory, x_refsource_REDHAT