THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-22853 (CRITICAL 9.8) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array

[NVD] CVE-2026-22853 (CRITICAL 9.8) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array

lownvdPublished 2026-01-14

CVE-2026-22853 CVSS: 9.8 CRITICAL Published: 2026-01-14T18:16:42.790

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1.

MITRE ATT&CK techniques

Remote Desktop ProtocolT1021.001

Indicators of compromise

CVE-2026-22853cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-22853