← CVE Intelligence

CVE-2026-22855

FreeRDP has a heap-buffer-overflow in smartcard_unpack_set_attrib_call PUBLISHED

Description (CNA)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.

Affected (CNA)

Vendor / productVersions
FreeRDP / FreeRDPaffected < 3.20.1

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A heap based buffer overflow has been discovered in FreeRDP. This heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length.