CVE-2026-23883

FreeRDP vulnerable: prior to 3.21.0, the xf_Pointer_New path frees cursorPixels on failure and then xf_Pointer_Free frees it again, causing a use-after-free (ASan UAF) that can crash the client and potentially enable heap-based code execution depending on allocator/heap layout. The issue affects ...

FreeRDP resource management error vulnerability

FreeRDP is an open-source RDP protocol implementation developed by the FreeRDP team. Versions of FreeRDP prior to 3.21.0 contained a resource management vulnerability. This vulnerability stemmed from the xfPointerNew function releasing cursorPixels when it failed. Subsequently, the pointerfree...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...