OESA-2026-1404

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1404
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-1404.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2026-1404
Upstream
Published
2026-02-13T11:10:25Z
Modified
2026-08-18T01:20:11.602010053Z
Severity
  • 6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
freerdp security update
Details

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp.

Security Fix(es):

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap buffer overflow vulnerability exists in the drive_process_irp_read function. When processing drive read requests, the function uses a server-controlled read length to copy file data into an IRP output stream buffer, but lacks a hard upper bound on this length. A malicious server can exploit this flaw by issuing an oversized read request, triggering a heap buffer overflow on the client side. This can lead to application crash (Denial of Service) and heap memory corruption, with potential code execution risk depending on allocator behavior and surrounding heap layout.(CVE-2026-22854)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / freerdp

Package

Name
freerdp
Purl
pkg:rpm/openEuler/freerdp&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.11.7-4.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "freerdp-2.11.7-4.oe2403sp1.x86_64.rpm",
        "freerdp-debuginfo-2.11.7-4.oe2403sp1.x86_64.rpm",
        "freerdp-debugsource-2.11.7-4.oe2403sp1.x86_64.rpm",
        "freerdp-devel-2.11.7-4.oe2403sp1.x86_64.rpm",
        "freerdp-help-2.11.7-4.oe2403sp1.x86_64.rpm",
        "libwinpr-2.11.7-4.oe2403sp1.x86_64.rpm",
        "libwinpr-devel-2.11.7-4.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "freerdp-2.11.7-4.oe2403sp1.aarch64.rpm",
        "freerdp-debuginfo-2.11.7-4.oe2403sp1.aarch64.rpm",
        "freerdp-debugsource-2.11.7-4.oe2403sp1.aarch64.rpm",
        "freerdp-devel-2.11.7-4.oe2403sp1.aarch64.rpm",
        "freerdp-help-2.11.7-4.oe2403sp1.aarch64.rpm",
        "libwinpr-2.11.7-4.oe2403sp1.aarch64.rpm",
        "libwinpr-devel-2.11.7-4.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "freerdp-2.11.7-4.oe2403sp1.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-1404.json"