HarborGuard / CVE
Back to search
HIGHCVE-2026-23884Published Modified CNA GitHub_M

CVE-2026-23884: Heap-use-after-free in gdi_set_bounds

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive. A malicious server can trigger a client‑side use after free, causing a crash (DoS) and potential heap corruption with code‑execution risk depending on allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.

Metrics

CVSS v4.0
7.7
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • FreeRDP / FreeRDP
    < 3.21.0
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
References