CVE-2026-22855 | BDVDB-2026-310697 Detail
FreeRDPFreeRDP
Description#
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rwp3-g84r-6mx9
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.20.1
- https://access.redhat.com/security/cve/CVE-2026-22855
- https://bugzilla.redhat.com/show_bug.cgi?id=2429645
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22855.json
- https://access.redhat.com/errata/RHSA-2026:4471
- https://access.redhat.com/errata/RHSA-2026:4121
- https://access.redhat.com/errata/RHSA-2026:3068
- https://access.redhat.com/errata/RHSA-2026:19033
- https://access.redhat.com/errata/RHSA-2026:3334
- https://access.redhat.com/errata/RHSA-2026:4439
- https://access.redhat.com/errata/RHSA-2026:4446
- https://access.redhat.com/errata/RHSA-2026:4440
- https://access.redhat.com/errata/RHSA-2026:4489
- https://access.redhat.com/errata/RHSA-2026:4437
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.