{"schema_version":"1.7.2","id":"OESA-2026-1402","modified":"2026-08-06T11:10:25Z","published":"2026-02-13T11:10:25Z","upstream":["CVE-2026-22854"],"summary":"freerdp security update","details":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's\nopen specifications. This package provides the client applications xfreerdp.\r\n\r\nSecurity Fix(es):\n\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap buffer overflow vulnerability exists in the `drive_process_irp_read` function. When processing drive read requests, the function uses a server-controlled read length to copy file data into an IRP output stream buffer, but lacks a hard upper bound on this length. A malicious server can exploit this flaw by issuing an oversized read request, triggering a heap buffer overflow on the client side. This can lead to application crash (Denial of Service) and heap memory corruption, with potential code execution risk depending on allocator behavior and surrounding heap layout.(CVE-2026-22854)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"freerdp","purl":"pkg:rpm/openEuler/freerdp&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.7-4.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["freerdp-2.11.7-4.oe2403sp3.aarch64.rpm","freerdp-debuginfo-2.11.7-4.oe2403sp3.aarch64.rpm","freerdp-debugsource-2.11.7-4.oe2403sp3.aarch64.rpm","freerdp-devel-2.11.7-4.oe2403sp3.aarch64.rpm","freerdp-help-2.11.7-4.oe2403sp3.aarch64.rpm","libwinpr-2.11.7-4.oe2403sp3.aarch64.rpm","libwinpr-devel-2.11.7-4.oe2403sp3.aarch64.rpm"],"src":["freerdp-2.11.7-4.oe2403sp3.src.rpm"],"x86_64":["freerdp-2.11.7-4.oe2403sp3.x86_64.rpm","freerdp-debuginfo-2.11.7-4.oe2403sp3.x86_64.rpm","freerdp-debugsource-2.11.7-4.oe2403sp3.x86_64.rpm","freerdp-devel-2.11.7-4.oe2403sp3.x86_64.rpm","freerdp-help-2.11.7-4.oe2403sp3.x86_64.rpm","libwinpr-2.11.7-4.oe2403sp3.x86_64.rpm","libwinpr-devel-2.11.7-4.oe2403sp3.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1402"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22854"}],"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}],"database_specific":{"severity":"Medium"}}