Search: CVE-2026-63652

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.6%	CVE-2026-63652Freerdp · Prior to 3.28.0, rdpsnd_server_recv_formats in channels/rdpsnd/server/rdpsnd_main.c frees context->client_formats on a malformed Client Audio High7.1EPSS 0.6%2026-08-19GCVE DatabaseCVE-2026-63652 FreeRDP versions prior to 3.28.0 contain a vulnerability in the rdpsnd_server_recv_formats function where a malformed Client Audio Formats PDU can cause a double free of memory. This issue can be triggered by an authenticated RDP client, leading to server termination and potential heap corruption. The vulnerability is fixed in version 3.28.0. EPSS 0.6%Report on CVE-2026-63652 Vulnerability	GCVE Database	2026-08-19

Page 1 of 1 · 1 duplicate CVE record merged