DEBIAN-CVE-2026-25959
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfcliprdrprovidedata passes freed pDstData to XChangeProperty because the cliprdr channel thread calls xfcliprdrserverformatdata_response which converts and uses the clipboard data without holding any lock, while the X11 event thread concurrently calls xfcliprdrclearcacheddata → HashTable_Clear which frees the same data via xfcacheddata_free, triggering a heap use after free. Version 3.23.0 fixes the issue.
Package Versions Affected
Automatically patch vulnerabilities without upgrading
CVSS Version



Related Resources
References
https://security-tracker.debian.org/tracker/CVE-2026-25959
