Debian/freerdp3: critical 9.8
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap bu
Action: Upgrade freerdp3 to 3.15.0+dfsg-2.1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.15.0+dfsg-2.1+deb13u1 | - |
Fixed versions
| 3.15.0+dfsg-2.1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-22853#Debian:13/freerdp3
- https://security-tracker.debian.org/tracker/CVE-2026-22853
published · modified · JSON