PT-2026-2931 · Freerdp+2 · Freerdp+2

Ehdgks0627 · Published 2026-01-01 · Updated 2026-03-18 · CVE-2026-22853

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1

Description FreeRDP, a free implementation of the Remote Desktop Protocol, contains a flaw in RDPEAR’s NDR array reader. The NDR array reader does not validate the element count, potentially leading to a heap buffer overflow when reading data. This occurs due to insufficient bounds checking when processing on-wire elements, allowing writes beyond the allocated heap buffer. The vulnerable component is the ndr read uint8Array function.

Recommendations Update to version 3.20.1 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2026:3068

BDU:2026-00625

CVE-2026-22853

GHSA-47V9-P4GP-W5CH

OPENSUSE-SU-2026:10059-1

OPENSUSE-SU-2026:20339-1

RHSA-2026:3068

RHSA-2026:4121

SUSE-SU-2026:0345-1

USN-8105-1

Affected Products

Freerdp

Linuxmint

Ubuntu

References · 143

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22853.json · Exploit
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47v9-p4gp-w5ch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22853 · Security Note
• https://ubuntu.com/security/CVE-2026-22858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22856 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22857 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23533 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26965 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23530 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8105-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-25953 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8105-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23884 · Vendor Advisory