Lucene search
+L

2 matches found

OSV
OSV
added 2026/02/13 7:32 p.m.12 views

CLSA-2026-1771011128 freerdp: Fix of 2 CVEs

CVE-2026-22857: fix heap use-after-free in irpthreadfunc when serialprocessirp fails - CVE-2026-23530: fix heap buffer overflow in planar bitmap decompression due to missing nSrcWidth/nSrcHeight validation...

9.8CVSS7.5AI score0.00453EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 5:53 p.m.3 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.6AI score0.00453EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder