SUSE-SU-2026:0449-1

CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audinprocessformats (bsc#1256718).
CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause heap-buffer-overflow in driveprocessirp_read (bsc#1256720).
CVE-2026-22856: race condition in the serial channel IRP thread tracking can cause heap-use-after-free in createirpthread(bsc#1256722).
CVE-2026-22859: improper bound check can lead to heap-buffer-overflow in urbselectconfiguration (bsc#1256725).
CVE-2026-23530: improper validation can lead to heap buffer overflow in planar_decompress_plane_rle (bsc#1256940).
CVE-2026-23531: improper validation in clear_decompress can lead to heap buffer overflow (bsc#1256941).
CVE-2026-23532: mismatch between destination rectangle clamping and the actual copy size can lead to a heap buffer overflow in gdi_SurfaceToSurface (bsc#1256942).
CVE-2026-23534: missing checks can lead to heap buffer overflow in clear_decompress_bands_data (bsc#1256944).

References

Affected packages

SUSE:Linux Enterprise Module for Package Hub 15 SP7

freerdp2

Package

Name: freerdp2
Purl: pkg:rpm/suse/freerdp2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.11.7-150700.3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "winpr2-devel": "2.11.7-150700.3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0449-1.json"

SUSE:Linux Enterprise Workstation Extension 15 SP7

freerdp2

Package

Name: freerdp2
Purl: pkg:rpm/suse/freerdp2&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.11.7-150700.3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "winpr2-devel": "2.11.7-150700.3.3.1",
            "libwinpr2-2": "2.11.7-150700.3.3.1",
            "freerdp2-devel": "2.11.7-150700.3.3.1",
            "freerdp2-server": "2.11.7-150700.3.3.1",
            "freerdp2": "2.11.7-150700.3.3.1",
            "libfreerdp2-2": "2.11.7-150700.3.3.1",
            "freerdp2-proxy": "2.11.7-150700.3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0449-1.json"