CVE-2026-22853 FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndrreaduint8Array. This vulnerabilit...

CVE-2026-22853

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndrreaduint8Array. This vulnerabilit...

CVE-2026-22853

Freerdp before 3.20.1 contains a bounds-check vulnerability in RDPEAR's NDR array reader that can write past a heap buffer, causing a heap-buffer-overflow in ndr_read_uint8Array. The issue is fixed in 3.20.1; multiple advisories (SUSE/OpenSUSE, Fedora) indicate updates to 3.20.2 or newer as the r...

CVE-2026-22853 FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not perform bounds checking on the on‑wire element count and can write past the heap buffer allocated from hints, causing a heap buffer overflow in ndrreaduint8Array. This vulnerabilit...

CVE-2025-12052

creationtimestamp| type| source ---|---|--- 2026-01-14 05:38:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcee467klb2a 2026-01-14 05:38:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcee4x4ppb2u...

CVE-2026-21307

creationtimestamp| type| source ---|---|--- 2026-01-13 21:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdh5zpo7g2g...

CVE-2026-21280

creationtimestamp| type| source ---|---|--- 2026-01-13 20:09:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdebzwdra2z 2026-01-13 20:09:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdedioj5e2p...

CVE-2026-21275

creationtimestamp| type| source ---|---|--- 2026-01-13 20:04:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcddzpg6vi2f...

CVE-2026-0877

creationtimestamp| type| source ---|---|--- 2026-01-13 18:13:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd5tnruh22m 2026-01-13 18:14:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd5vmf4cx22 2026-01-14 15:25:28+00:00| seen|...

CVE-2025-66698

creationtimestamp| type| source ---|---|--- 2026-01-13 18:13:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd5th2xwd2a 2026-01-13 18:14:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd5vecsdk2m 2026-07-06 11:07:26+00:00| seen|...

CVE-2025-64155

creationtimestamp| type| source ---|---|--- 2026-01-13 17:20:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2v6jyuo2f 2026-01-13 17:21:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd2wrhfiu27 2026-01-13 18:17:24+00:00| seen|...

CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

AZL-74450 CVE-2025-68777 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

UBUNTU-CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2026-0892

creationtimestamp| type| source ---|---|--- 2026-01-13 16:03:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccwldcfcw2u 2026-01-13 16:10:43+00:00| seen| Telegram/NtGdm-nKviNCWHikD-PcF3b4R8AkgqcqlHzrx8XSXT7S4dA 2026-01-13 23:47:38+00:00| seen|...

CVE-2025-68777 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc - fix off-by-one error in wireorder validation The current validation 'wireorderi ARRAYSIZEconfigpins' allows wireorderi to equal ARRAYSIZEconfigpins, which causes out-of-bounds access when used as index in...

CVE-2025-68777

CVE-2025-68777 in the Linux kernel affects the ti_am335x_tsc driver. The validation for wire_order uses the condition wire_order[i] > ARRAY_SIZE(config_pins), which permits wire_order[i] to equal ARRAY_SIZE(config_pins) and can trigger an out-of-bounds access when indexing config_pins[wire_ord...