Remote Desktop Protocol Vulnerability in FreeRDP by FreeRDP

CVE-2026-44422

What is CVE-2026-44422?

FreeRDP, a widely used open-source implementation of the Remote Desktop Protocol, contains a significant vulnerability in its RDPEAR NDR parser prior to version 3.26.0. This flaw allows improper handling of the non-null NDR pointer reference IDs for multiple logical pointer fields without adequate tracking of expected NDR types or ownership. Consequently, the parser may incorrectly assign the same heap object to multiple output fields when the same reference ID is reused. Subsequently, when the generic destructor attempts to free these pointers, it can lead to a triggering condition by a malicious server, resulting in a heap use-after-free or double-free scenario during the RDPEAR authentication-redirection process. Users are advised to upgrade to version 3.26.0 or later to mitigate this vulnerability effectively.

References