Name
CVE-2026-22857
Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irp_thread_func because the IRP is freed by irp->Complete() and then accessed again on the error path. This vulnerability is fixed in 3.20.1.
CWEs
Published Date
Updated Date
Workaround
-
Analysis#
Vulnerability Ratings#
6.8
CVSSv4
9.8
CVSSv31
NaN
other