Out-of-Bounds Access Vulnerability in FreeRDP Remote Desktop Protocol Implementation

CVE-2026-24682

What is CVE-2026-24682?

FreeRDP, a free implementation of the Remote Desktop Protocol, contains a vulnerability related to improper handling of audio formats. Specifically, in versions prior to 3.22.0, the function audin_server_recv_formats incorrectly frees an excessive number of audio formats during a parse failure. This flaw can lead to out-of-bounds access in the audio_formats_free function, potentially resulting in unintended behavior or compromise. Users are urged to update to version 3.22.0 or later to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References