CVE-2026-22853 in FreeRDPИнформация

Сводка

по MITRE • 14.01.2026

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

GitHub M

Резервировать

12.01.2026

Раскрытие

14.01.2026

Модерация

принято

Вход

VDB-341142

EPSS

0.00759

KEV

Нет

Деятельности

Очень низкий

Сектор

Chemical, Lawfirm, ...

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-22853
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-22853
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-22853/

◂ ПредыдущийОбзорДалее ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!