FreeRDP Heap Use-After-Free Vulnerability in Video Timer Component

A heap use-after-free vulnerability has been identified in FreeRDP, a free implementation of the Remote Desktop Protocol. This issue affects versions through 3.21.0. The vulnerability arises in the video_timer function, which can send client notifications after the control channel has been closed. This behavior leads to dereferencing a freed callback, creating a use-after-free condition. The vulnerability can be exploited by a malicious server, causing a client-side crash and potential heap corruption, with a risk of code execution depending on the allocator's behavior and the surrounding heap layout.

Impact

Exploitation of this vulnerability causes a client-side crash and potential heap corruption, with a risk of code execution depending on the allocator's behavior and surrounding heap layout.

Remediation

Users can upgrade to FreeRDP version 3.22.0 or later to address this vulnerability.