REDHAT-BUG-2533942: Use After Free

Q: Which systems should be prioritized for remediation?

FreeRDP Server deployments running versions earlier than 3.31.0 should be prioritized, particularly where authenticated clients can connect.

Q: What level of access does an attacker need?

The attacker must be an authenticated client. Exploitation involves racing AUDIN channel closure messages against DRDYNVC data parsing.

Published Sep 15, 2026

Updated

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-free when accessing freed channel objects.

Affected Software

1 affected component

FreeRDP FreeRDP Server<3.31.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade FreeRDP server to a version that resolves this vulnerability.
Fixed in 3.31.0

Event History

Sep 15, 2026

Data Sourced

via Red Hat·03:52 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems should be prioritized for remediation?

FreeRDP Server deployments running versions earlier than 3.31.0 should be prioritized, particularly where authenticated clients can connect.

What level of access does an attacker need?

The attacker must be an authenticated client. Exploitation involves racing AUDIN channel closure messages against DRDYNVC data parsing.

REDHAT-BUG-2533942: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems should be prioritized for remediation?

What level of access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for remediation?

What level of access does an attacker need?