FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap out-of-bounds read occurs in the smartcard SetAttrib path when cbAttrLen does not match the actual NDR buffer length. This vulnerability is fixed in 3.20.1.
CVSS Details
- CVSS 4.0 Base Score: 5.6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdpUpgrade libwinprUpgrade freerdp-devel | Feb 27, 2026 | Feb 23, 2026 |
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Jan 14, 2026 |
| Amazon Linux Ami 2 | — | Upgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade libwinpr | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libwinpr-debuginfoUpgrade freerdp-server-debuginfoUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinprUpgrade freerdp-serverUpgrade freerdp-libs-debuginfo | Feb 20, 2026 | Jan 14, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade libwinpr-develUpgrade freerdp-develUpgrade freerdp-libsUpgrade libwinprUpgrade freerdpUpgrade freerdp-server | Feb 24, 2026 | Jan 14, 2026 |
| Redhat_linux | — | Upgrade libwinpr-debuginfoUpgrade libwinprUpgrade freerdp-debuginfoUpgrade freerdp-serverUpgrade freerdp-libsNo solution existsUpgrade freerdp-debugsourceUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade freerdp-libs-debuginfoUpgrade libwinpr-develUpgrade freerdp | Feb 24, 2026 | Jan 14, 2026 |
| Rocky_linux | — | Upgrade freerdp-server-debuginfoUpgrade libwinprUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-serverUpgrade libwinpr-develUpgrade freerdp-libs-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-debuginfo | Feb 26, 2026 | Feb 24, 2026 |
| Suse | — | Upgrade freerdp-develUpgrade libfreerdp3-3Upgrade rdtk0-develUpgrade libuwac0-0Upgrade freerdp2-develUpgrade freerdp-proxy-pluginsUpgrade freerdp2-serverUpgrade freerdp-serverUpgrade libwinpr2-2Upgrade freerdp2Upgrade libfreerdp2-2Upgrade libfreerdp-server-proxy3-3Upgrade freerdp2-proxyUpgrade uwac0-0-develUpgrade libwinpr3-3Upgrade freerdp-waylandUpgrade uwac0-develUpgrade winpr2-develUpgrade librdtk0-0Upgrade winpr-develUpgrade freerdp-proxyUpgrade freerdp-sdlUpgrade freerdp | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3 | Mar 19, 2026 | Jan 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub