FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndr_read_uint8Array. This vulnerability is fixed in 3.20.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp | Feb 10, 2026 | Jan 14, 2026 |
| Debian | — | Upgrade freerdp3 | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade freerdp-develUpgrade freerdpUpgrade libwinpr-develUpgrade freerdp-libsUpgrade freerdp-serverUpgrade libwinpr | Feb 24, 2026 | Jan 14, 2026 |
| Redhat_linux | — | Upgrade freerdp-debuginfoUpgrade freerdp-debugsourceUpgrade libwinpr-develUpgrade freerdpUpgrade freerdp-libs-debuginfoNo solution existsUpgrade freerdp-server-debuginfoUpgrade freerdp-develUpgrade libwinprUpgrade libwinpr-debuginfoUpgrade freerdp-serverUpgrade freerdp-libs | Feb 24, 2026 | Jan 14, 2026 |
| Rocky_linux | — | Upgrade libwinpr-develUpgrade freerdp-debugsourceUpgrade libwinprUpgrade freerdpUpgrade freerdp-server-debuginfoUpgrade freerdp-libs-debuginfoUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdp-develUpgrade libwinpr-debuginfoUpgrade freerdp-server | Feb 26, 2026 | Feb 24, 2026 |
| Suse | — | Upgrade rdtk0-develUpgrade winpr-develUpgrade freerdpUpgrade freerdp-develUpgrade uwac0-develUpgrade freerdp-sdlUpgrade libfreerdp-server-proxy3-3Upgrade librdtk0-0Upgrade libwinpr3-3Upgrade freerdp-serverUpgrade freerdp-waylandUpgrade libfreerdp3-3Upgrade freerdp-proxyUpgrade freerdp-proxy-pluginsUpgrade libuwac0-0 | Feb 2, 2026 | Jan 30, 2026 |
| Ubuntu | — | Upgrade libfreerdp3-3 | Mar 19, 2026 | Jan 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub