CVE-2026-27950

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after-free described in CVE-2026-24680 is incomplete. While the vulnerable execution flow referenced in the advisory exists in the SDL2 implementation, the fix appears to have been applied only to the SDL3 code path. In the SDL2 implementation, the pointer is not nulled after free. This creates a situation where the advisory suggests the vulnerability is fully resolved, while builds or environments still using SDL2 may retain the vulnerable logic. A complete fix is available in version 3.23.0.

• CWE-416

• https://github.com/FreeRDP/FreeRDP/blob/master/client/SDL/SDL2/sdl_pointer.cpp#L63-L64Product
• https://github.com/FreeRDP/FreeRDP/commit/5f62aa11c1bdf00f94c40ea9ebb260a752740b80Patch
• https://github.com/FreeRDP/FreeRDP/commit/c42ecbd183b001e76bfc3614cddfad0034acc758Patch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rvfg-86cr-5r6pPatch, Vendor Advisory

Published

Feb 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27945ZITADEL is an open source identity management platform. Zita…6.5
• CVE-2026-27946ZITADEL is an open source identity management platform. Prio…6.5
• CVE-2026-27947Group-Office is an enterprise customer relationship manageme…8.8
• CVE-2026-27948Copyparty is a portable file server. In versions prior to 1.…6.1
• CVE-2026-27949Plane is an an open-source project management tool. Prior to…4.3
• CVE-2026-2795Use-after-free in the JavaScript: GC component. This vulnera…9.8
• CVE-2026-27951FreeRDP is a free implementation of the Remote Desktop Proto…7.5
• CVE-2026-27952Agenta is an open-source LLMOps platform. In Agenta-API prio…9.9
• CVE-2026-27953ormar is a async mini ORM for Python. Versions 0.23.0 and be…9.8
• CVE-2026-27954Live Helper Chat is an open-source application that enables …6.5
• CVE-2026-27955Coolify is an open-source and self-hostable tool for managin…6.6
• CVE-2026-27956Coolify is an open-source and self-hostable tool for managin…4.3