CVE-2026-24679— FreeRDP has a heap-buffer-overflow in urb_select_interface
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-24679
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FreeRDP has a heap-buffer-overflow in urb_select_interface
Source: NVD (National Vulnerability Database)
Vulnerability Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied interface numbers as array indices without bounds checks, causing an out-of-bounds read in libusb_udev_select_interface. This vulnerability is fixed in 3.22.0.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
堆缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
FreeRDP 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FreeRDP是FreeRDP团队的一款开源的远程桌面协议（RDP）的实现。 FreeRDP 3.22.0之前版本存在安全漏洞，该漏洞源于URBDRC客户端使用服务器提供的接口号作为数组索引而未进行边界检查，可能导致越界读取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-24679
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-24679
请登录查看更多情报信息。
Same Patch Batch · FreeRDP · 2026-02-09 · 12 CVEs total
| CVE-2026-24675 | FreeRDP has a Heap-use-after-free in urb_select_interface | |
| CVE-2026-24677 | FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264 | |
| CVE-2026-24491 | FreeRDP has a heap-use-after-free in video_timer | |
| CVE-2026-24684 | FreeRDP has a Heap-use-after-free in play_thread | |
| CVE-2026-24681 | FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb | |
| CVE-2026-24678 | FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread | |
| CVE-2026-24682 | FreeRDP has a Heap-buffer-overflow in audio_formats_free | |
| CVE-2026-24676 | FreeRDP has a heap-use-after-free in audio_format_compatible | |
| CVE-2026-24683 | FreeRDP has a heap-use-after-free in ainput_send_input_event | |
| CVE-2026-24680 | FreeRDP has a heap-use-after-free in update_pointer_new(SDL) | |
| CVE-2026-23948 | FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() |
IV. Related Vulnerabilities
Same product: FreeRDP
- CVE-2026-40254
FreeRDP: contains_dotdot() off-by-one allows drive channel p - CVE-2026-33995
FreeRDP: Possible double free in kerberos_AcceptSecurityCont - CVE-2026-33987
FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write - CVE-2026-33986
FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write - CVE-2026-33985
FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read
Same vendor: FreeRDP
- CVE-2026-40254
FreeRDP: contains_dotdot() off-by-one allows drive channel p - CVE-2026-33995
FreeRDP: Possible double free in kerberos_AcceptSecurityCont - CVE-2026-33987
FreeRDP: Persistent Cache bmpSize Desync - Heap OOB Write - CVE-2026-33986
FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write - CVE-2026-33985
FreeRDP: ClearCodec Glyph Cache Count Desync - Heap OOB Read
Same weakness: CWE-122
- CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8213
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow - CVE-2026-8212
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow - CVE-2026-42309
Pillow: Heap buffer overflow with nested list coordinates - CVE-2026-45130
Vim: Heap Buffer Overflow in spell file loading
V. Comments for CVE-2026-24679
No comments yet