Ecosystem	Package	Version

Vulnerabilities

CVE-2026-22855

CVE-2026-22855

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.

Published Feb 26, 2026

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rwp3-g84r-6mx9

CVSS ScoreCritical

9.1

Ecosystem	Package	Version


nuget	FreeRDP	2.0.0.10
nuget	FreeRDP	2.0.0.11
nuget	FreeRDP	2.0.0.12
nuget	FreeRDP	2.0.0.13
nuget	FreeRDP	2.0.0.1
nuget	FreeRDP	2.0.0.2
nuget	FreeRDP	2.0.0.3
nuget	FreeRDP	2.0.0.4
nuget	FreeRDP	2.0.0.5
nuget	FreeRDP	2.0.0.6
nuget	FreeRDP	2.0.0.7
nuget	FreeRDP	2.0.0.8
nuget	FreeRDP	2.0.0.9
nuget	FreeRDP	2.0.0
nuget	FreeRDP-Sharp.Native	1.1.0
nuget	FreeRDP-Sharp.Native	1.1.1
rpm	freerdp	1.0.2-1.el5
rpm	freerdp	1.0.2-1.el6
rpm	freerdp	1.0.2-10.el7
rpm	freerdp	1.0.2-15.el7
rpm	freerdp	1.0.2-15.el7_6.1
rpm	freerdp	1.0.2-2.el6
rpm	freerdp	1.0.2-5.el6
rpm	freerdp	1.0.2-5.el7
rpm	freerdp	1.0.2-5.el7_1.1
rpm	freerdp	1.0.2-6.el6
rpm	freerdp	1.0.2-6.el7_2.1
rpm	freerdp	1.0.2-7.el6_10
rpm	freerdp	2.0.0-1.rc4.el7
rpm	freerdp	2.0.0-2.rc4.el7_8
rpm	freerdp	2.0.0-4.rc4.el7_8.1
rpm	freerdp	2.0.0-4.rc4.el7_8
rpm	freerdp	2.1.1-2.el7
rpm	freerdp	2.1.1-5.el7_9
rpm	freerdp	2
rpm	freerdp-debuginfo	1.0.2-1.el5
rpm	freerdp-debuginfo	1.0.2-1.el6
rpm	freerdp-devel	1.0.2-1.el5
rpm	freerdp-devel	1.0.2-1.el6
rpm	freerdp-devel	1.0.2-10.el7
rpm	freerdp-devel	1.0.2-15.el7
rpm	freerdp-devel	1.0.2-15.el7_6.1
rpm	freerdp-devel	1.0.2-2.el6
rpm	freerdp-devel	1.0.2-5.el6
rpm	freerdp-devel	1.0.2-5.el7
rpm	freerdp-devel	1.0.2-5.el7_1.1
rpm	freerdp-devel	1.0.2-6.el6
rpm	freerdp-devel	1.0.2-6.el7_2.1
rpm	freerdp-devel	1.0.2-7.el6_10
rpm	freerdp-devel	2.0.0-1.rc4.el7

CVE-2026-22855 | Components Impacted | Sonatype Guide | Sonatype Guide