Skip to content
COOEY

EXPOSURES › CVE-2026-22853

CVE-2026-22853

CRITICAL
DETAIL
SourceNVD · cve Published2026-01-14 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-22853 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
freerdp · vendorfreerdp · product
DESCRIPTION

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.