CVE-2026-64621

FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning pointer to it is freed on the strtoul error path without clearing settings->MonitorIds, leaving it dangling; at teardown freerdp_settings_free() frees the same buffer again. An attacker who convinces a victim to open a crafted .rdp file with oversized monitor tokens can trigger a size-controlled double-free in any FreeRDP CLI client (xfreerdp/sdl-freerdp/wlfreerdp) in the default configuration.

• CWE-415

• https://github.com/FreeRDP/FreeRDP/commit/1f7a716d39b5605bb8a83b0c3c97a6ce386609efPatch
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f27x-frr8-j9hcExploit, Mitigation, Vendor Advisory
• https://www.vulncheck.com/advisories/freerdp-before-double-free-via-selectedmonitorsPatch, Third Party Advisory
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f27x-frr8-j9hcExploit, Mitigation, Vendor Advisory

Published

Jul 20, 2026

Last Modified

Jul 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64614Data::Deque::Shared versions before 0.06 for Perl create a w…3.8
• CVE-2026-64615Data::Graph::Shared versions before 0.04 for Perl create a w…3.3
• CVE-2026-64616Data::NDArray::Shared versions before 0.02 for Perl create a…3.3
• CVE-2026-64617Data::PubSub::Shared versions before 0.07 for Perl create a …3.8
• CVE-2026-64619FileCodeBox before 2.4 contains a rate-limit bypass vulnerab…8.7
• CVE-2026-64620FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-ba…9.1
• CVE-2026-64622Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 …9.3
• CVE-2026-64623Network-AI before 5.13.4 contains an improper cryptographic …8.8
• CVE-2026-64624FreeRDP before 3.28.0 treats lines beginning with forward sl…8.5
• CVE-2026-64625AVideo before 29.0 contains an incomplete fix for CVE-2026-4…9.8
• CVE-2026-64626AVideo versions from commit 0dbadbca through latest master c…6.4
• CVE-2026-64627Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and ver…6.9