3.25.0 release

Posted by Armin Novak on April 23, 2026

FreeRDP 3.25.0 has just been released and uploaded to

https://pub.freerdp.com/releases/

Bugfix and feature release.

Experimental AV1 support has been added. This currently works only with FreeRDP based servers.
Most notably there is now support for [MS-RDPEWA] (FIDO2 redirection)
Android client received a (small) facelift
Improved SDL3 client drawing performance
Console output support for SDL3 (windows) and windows native client
RDP proxy now supports NSCodec and RFX modes.
RDP PRoxy now has smartcard emulation and SAM file support (via config file)
Smartcard KSP support for NLA authentication

CVE fixes

CVE-2026-40254

What’s Changed

[winpr,wlog] add WLog_SetGlobalPrefix (#12497)
[channels,video] fix wrong cast (#12511)
[codec,openh264] reject encoder ABI mismatch on runtime-loaded library (#12510)
[client,sdl] create a copy of rdpPointer (#12512)
[codec,video] properly pass intermediate format (#12518)
[utils, signal] lazily initialize Windows CRITICAL_SECTION to match POSIX static mutex behavior (#12520)
winpr: improve libunwind backtraces (#12530)
[server,shadow] remember selected caps (#12528)
Zero credential data before free in NLA and NTLM context (#12532)
[server,proxy] ignore missing client in input channel (#12536)
[server,proxy] ignore rdpdr messages (#12537)
[winpr,sspi] improve kerberos logging (#12538)
Codec fixes (#12542)
[winpr,sspi] Fix context nullptr handling (#12543)
Dev 3.24.3 dev0 (#12545)
Fix memory leak in gdi_create_bitmap() on gdi_CreateBitmap failure (libfreerdp/gdi/graphics.c) (#12547)
Fix memory leak in vgids_read_do_fkt() on Stream_New failure (libfreerdp/emu/scard/smartcard_virtual_gids.c) (#12548)
Proxy config improve (#12549)
Proxy config improve (#12550)
[client,sdl] clamp cursor hotspot (#12553)
RFC: Research/av1 codec extension (#12527)
[winpr,kerberos] fix krb_log_context_encryption (#12555)
[client,sdl] fix global init return check (#12558)
Fix remote credential with windows11h2 (#12560)
Proxy scard auth improvements (#12561)
[winpr,sspi] guard krb5_get_etype_info (#12562)
[utils,smartcard] fix STATUS_BUFFER_TOO_SMALL (#12564)
[client,common] do not manipulate security settings for smartcard-logon (#12567)
[channels,audin] fix regression for microphone (#12570)
[client,sdl] add SDL_KMOD_MODE and SDL_KMOD_LEVEL5 (#12569)
Fix unbound strlen on slotDescription (#12571)
build: Update FindFFmpeg.cmake to support Apple frameworks with ‘lib’ prefix (#12565)
[channels,rdpewa] add WebAuthn virtual channel support (#12572)
[core] fix freerdp_get_nla_sspi_error always returning 0 on client (#12574)
[ci] enable rdpewa channel (#12576)
small refactoring (#12578)
Rdpewa unify notifications (#12581)
[client,sdl] fix crash when clicking ‘cancel’ on PIN popup (#12580)
[channels,drive] refine bounds checks (#12584)
fix: smartcard logon with ECC keys and minidriver-assigned container names (#12585)
Various papercuts (#12583)
fix: console output on Windows client (#12573)
[winpr,crt] dump stack on aligned memory errors (#12588)
[client,x11] keep scancode input for Ctrl/Alt/Super combinations in /kbd:unicode mode (#12590)
[codec,progressive] fix underflow guard in progressive_rfx_quant_sub (#12592)
fix: wfreerdp floatbar visibility (#12594)
[winpr,json] return a copy from WINPR_JSON_Print* (#12595)
[client,sdl] drop WITH_DEBUG_SDL_EVENTS (#12599)
Ncrypt and asn1 cleanup (#12604)
Video channel fix (#12593)
[codec,h264] fix media foundation backend (#12606)
fix(sdl): detect Hyprland and river in tryFallback() (#12608)
Proxy stress fixes (#12597)
Add new fuzzer tests (#12613)
fix(sdl): use SDL_Renderer instead of software surfaces (#12607)
fix(sdl): BFS neighbor walk pop/begin mismatch in addOrUpdateDisplay (#12614)
fix(sdl): promote first monitor as primary when subset excludes primary (#12618)
[ci,android] default to only aarch64 (#12622)
Fix process exit code on non-pidfd platforms (macOS, BSD)#12534) (#12586)
warning cleanups (#12626)
fix: prevent PostQuitMessage in RemoteApp WM_DESTROY handler (#12629)
[winpr,ntlm] fix message cleanup across the SSPI lifecycle (#12609)
Code bug fixes (#12632)
Oss fixes (#12633)
[client,android] add an option to enable keeping screen on when connected (#12630)
[client, android] Fix layout overlaps, migrate to AndroidX, and update UI components (#12628)
Proxy config tests (#12636)
Proxy config optional targethost (#12637)
[client,sdl] set SDL_HINT_SCREENSAVER_INHIBIT_ACTIVITY_NAME (#12639)
Nightly deb fix (#12640, #12641, #12649, #12650, #12642, #12643)
[winpr,input] fix korean keyboard mapping (#12646)
[client,sdl] set hints before SDL_Init (#12644)
Sdl inhibit option (#12647)
[client,X11] fix residual race in xf_clipboard_formats_free (#12648)
(sdl3): Fix oversized window on HiDPI Wayland (#12635)
[cache,bitmap] fix off-by-one in bitmap_cache_put bounds check (#12651)
[winpr,sspi] free fields buffer immediately (#12654)
[codec,dsp] fix fencepost error in dsp_ima_clamp_step (#12655)

New Contributors

@Kotivskyi made their first contribution in (#12532)
@Skinner927 made their first contribution in (#12571)
@bluca made their first contribution in (#12572)
@sitiom made their first contribution in (#12573)
@mtixt made their first contribution in (#12590)
@MrVampy made their first contribution in (#12608)
@ZackaryShen made their first contribution in (#12629)
@parasol-aser made their first contribution in (#12609)
@svncibrahim made their first contribution in (#12628)

Full Changelog: https://github.com/FreeRDP/FreeRDP/compare/3.24.2…3.25.0