CVE-2026-63652 | FreeRDP up to 3.27.x RDP Sound Server rdpsnd_main.c rdpsnd_server_recv_formats double free

August 19, 2026 Yanac

A vulnerability classified as very critical was found in FreeRDP up to 3.27.x. This affects the function rdpsnd_server_recv_formats of the file channels/rdpsnd/server/rdpsnd_main.c of the component RDP Sound Server. Executing a manipulation can lead to double free.

The identification of this vulnerability is CVE-2026-63652. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More