CVE-2026-25959
FreeRDP is a free implementation of the Remote Desktop Protocol.
Published Feb 25, 2026 · updated Jun 17, 2026 · freerdp freerdp
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, passes freed to because the cliprdr channel thread calls which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls → which frees the same data via , triggering a heap use after free. Version 3.23.0 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Feb 25, 2026 · NIST NVD
Detected
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, passes freed to because the cliprdr channel thread calls which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls → which frees the same data via , triggering a heap use after free. Version 3.23.0 fixes the issue.
Jun 17, 2026 · NIST NVD
Updated
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, passes freed to because the cliprdr channel thread calls which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls → which frees the same data via , triggering a heap use after free. Version 3.23.0 fixes the issue.
Affected
- cpe freerdp/freerdpversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-25959
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-25959
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, passes freed to because the cliprdr channel thread calls which converts and uses the clipboar
nvd.nist.gov