Remote Desktop Protocol Implementation Vulnerability in FreeRDP
CVE-2026-25954
What is CVE-2026-25954?
The FreeRDP implementation of the Remote Desktop Protocol contains a pointer dereference vulnerability due to improper handling of window pointers. In versions prior to 3.23.0, the xf_rail_server_local_move_size function can dereference a freed xfAppWindow pointer because it retrieves an unprotected pointer from the railWindows hash table. This situation may arise when the main thread deletes a window while the RAIL channel thread concurrently accesses the pointer, potentially leading to application crashes or unintended behavior. This issue has been resolved in version 3.23.0.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FreeRDP < 3.23.0