CVE-2026-22853

Freerdp before 3.20.1 contains a bounds-check vulnerability in RDPEAR's NDR array reader that can write past a heap buffer, causing a heap-buffer-overflow in ndr_read_uint8Array. The issue is fixed in 3.20.1; multiple advisories (SUSE/OpenSUSE, Fedora) indicate updates to 3.20.2 or newer as the r...