VDB

CVE-2026-22853

CVE-2026-22853 PUBLISHED CVSS 6.8 MEDIUM

Reported by GitHub_M · Published January 14, 2026

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1.

Risk Scores

CVSS 4.0
6.8
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Affected Products

VendorProductVersions
FreeRDPFreeRDP< 3.20.1
Red HatRed Hat Enterprise Linux 102:3.10.3-12.el10_2.2, 2:3.10.3-5.el10_1.2
FreeRDPFreeRDP< 3.20.1, < 3.20.1, < 3.20.1
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux CodeReady Linux Builder (v. 10)
Red HatRed Hat Enterprise Linux 9
alpinefreerdp0, 0, 0
Red HatRed Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support2:3.10.3-3.el10_0.2
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux AppStream EUS (v. 10.0)
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux AppStream (v. 10)
Red HatRed Hat Enterprise Linux 7

Timeline

  • Jan 14, 2026 CVE Published
  • Jan 15, 2026 EPSS Score
  • Jan 18, 2026 EPSS Score
  • Jan 21, 2026 EPSS Score
  • Jan 24, 2026 EPSS Score
  • Jan 27, 2026 EPSS Score
  • Jan 30, 2026 EPSS Score
  • Feb 2, 2026 EPSS Score
  • Feb 5, 2026 EPSS Score
  • Feb 7, 2026 EPSS Score
  • Feb 10, 2026 EPSS Score
  • Feb 13, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›