CVE-2026-24680 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-24680 Interim 1 1 2026-03-05T00:16:20Z current 2026-03-05T00:16:20Z 2026-03-05T00:16:20Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-24680 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2026-March/024553.html E-Mail link for SUSE-SU-2026:0763-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Tumbleweed freerdp freerdp-3.10.3-150700.3.6.1 freerdp-3.22.0-1.1 freerdp-devel freerdp-devel-3.10.3-150700.3.6.1 freerdp-devel-3.22.0-1.1 freerdp-proxy freerdp-proxy-3.10.3-150700.3.6.1 freerdp-proxy-3.22.0-1.1 freerdp-proxy-plugins freerdp-proxy-plugins-3.10.3-150700.3.6.1 freerdp-proxy-plugins-3.22.0-1.1 freerdp-sdl freerdp-sdl-3.10.3-150700.3.6.1 freerdp-sdl-3.22.0-1.1 freerdp-server freerdp-server-3.10.3-150700.3.6.1 freerdp-server-3.22.0-1.1 freerdp-wayland freerdp-wayland-3.10.3-150700.3.6.1 freerdp-wayland-3.22.0-1.1 freerdp2 freerdp2-devel freerdp2-proxy freerdp2-server libfreerdp-server-proxy3-3 libfreerdp-server-proxy3-3-3.10.3-150700.3.6.1 libfreerdp-server-proxy3-3-3.22.0-1.1 libfreerdp2-2 libfreerdp3-3 libfreerdp3-3-3.10.3-150700.3.6.1 libfreerdp3-3-3.22.0-1.1 librdtk0-0 librdtk0-0-3.10.3-150700.3.6.1 librdtk0-0-3.22.0-1.1 libuwac0-0 libuwac0-0-3.10.3-150700.3.6.1 libuwac0-0-3.22.0-1.1 libwinpr2-2 libwinpr3-3 libwinpr3-3-3.10.3-150700.3.6.1 libwinpr3-3-3.22.0-1.1 rdtk0-devel-3.22.0-1.1 uwac0-0-devel uwac0-devel-3.22.0-1.1 winpr-devel winpr-devel-3.10.3-150700.3.6.1 winpr-devel-3.22.0-1.1 winpr2-devel freerdp-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-proxy-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-server-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-wayland-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libuwac0-0-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-devel-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy-plugins-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-sdl-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-server-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp-server-proxy3-3-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp3-3-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 librdtk0-0-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr3-3-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr-devel-3.10.3-150700.3.6.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-devel-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-proxy-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-proxy-plugins-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-sdl-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-server-3.22.0-1.1 as a component of openSUSE Tumbleweed freerdp-wayland-3.22.0-1.1 as a component of openSUSE Tumbleweed libfreerdp-server-proxy3-3-3.22.0-1.1 as a component of openSUSE Tumbleweed libfreerdp3-3-3.22.0-1.1 as a component of openSUSE Tumbleweed librdtk0-0-3.22.0-1.1 as a component of openSUSE Tumbleweed libuwac0-0-3.22.0-1.1 as a component of openSUSE Tumbleweed libwinpr3-3-3.22.0-1.1 as a component of openSUSE Tumbleweed rdtk0-devel-3.22.0-1.1 as a component of openSUSE Tumbleweed uwac0-devel-3.22.0-1.1 as a component of openSUSE Tumbleweed winpr-devel-3.22.0-1.1 as a component of openSUSE Tumbleweed winpr2-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS winpr2-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS freerdp as a component of SUSE Linux Enterprise Server 12 SP5-LTSS freerdp as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security freerdp as a component of SUSE Linux Enterprise Server 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server 16.0 freerdp-server as a component of SUSE Linux Enterprise Server 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server 16.0 winpr-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-server as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 winpr-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-proxy as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-server as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp2-2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr2-2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr2-devel as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp as a component of openSUSE Leap 15.6 freerdp-devel as a component of openSUSE Leap 15.6 freerdp-proxy as a component of openSUSE Leap 15.6 freerdp-server as a component of openSUSE Leap 15.6 freerdp-wayland as a component of openSUSE Leap 15.6 libfreerdp2-2 as a component of openSUSE Leap 15.6 libuwac0-0 as a component of openSUSE Leap 15.6 libwinpr2-2 as a component of openSUSE Leap 15.6 uwac0-0-devel as a component of openSUSE Leap 15.6 winpr-devel as a component of openSUSE Leap 15.6 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure, then pointer_free calls sdl_Pointer_Free and frees it again, triggering ASan UAF. This vulnerability is fixed in 3.22.0. CVE-2026-24680 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.6.1 SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.6.1 openSUSE Tumbleweed:freerdp-3.22.0-1.1 openSUSE Tumbleweed:freerdp-devel-3.22.0-1.1 openSUSE Tumbleweed:freerdp-proxy-3.22.0-1.1 openSUSE Tumbleweed:freerdp-proxy-plugins-3.22.0-1.1 openSUSE Tumbleweed:freerdp-sdl-3.22.0-1.1 openSUSE Tumbleweed:freerdp-server-3.22.0-1.1 openSUSE Tumbleweed:freerdp-wayland-3.22.0-1.1 openSUSE Tumbleweed:libfreerdp-server-proxy3-3-3.22.0-1.1 openSUSE Tumbleweed:libfreerdp3-3-3.22.0-1.1 openSUSE Tumbleweed:librdtk0-0-3.22.0-1.1 openSUSE Tumbleweed:libuwac0-0-3.22.0-1.1 openSUSE Tumbleweed:libwinpr3-3-3.22.0-1.1 openSUSE Tumbleweed:rdtk0-devel-3.22.0-1.1 openSUSE Tumbleweed:uwac0-devel-3.22.0-1.1 openSUSE Tumbleweed:winpr-devel-3.22.0-1.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp2 SUSE Linux Enterprise Module for Package Hub 15 SP7:winpr2-devel SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:freerdp SUSE Linux Enterprise Server 12 SP5-LTSS:freerdp SUSE Linux Enterprise Server 12 SP5-LTSS:freerdp-devel SUSE Linux Enterprise Server 12 SP5-LTSS:winpr2-devel SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-devel SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-proxy SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-server SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp2-2 SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr2-2 SUSE Linux Enterprise Workstation Extension 15 SP7:winpr2-devel openSUSE Leap 15.6:freerdp openSUSE Leap 15.6:freerdp-devel openSUSE Leap 15.6:freerdp-proxy openSUSE Leap 15.6:freerdp-server openSUSE Leap 15.6:freerdp-wayland openSUSE Leap 15.6:libfreerdp2-2 openSUSE Leap 15.6:libuwac0-0 openSUSE Leap 15.6:libwinpr2-2 openSUSE Leap 15.6:uwac0-0-devel openSUSE Leap 15.6:winpr-devel important 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L