CVE-2026-22854 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-22854 Interim 1 1 2026-03-05T00:18:13Z current 2026-03-05T00:18:13Z 2026-03-05T00:18:13Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-22854 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap memory. This vulnerability is fixed in 3.20.1. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2026-January/023993.html E-Mail link for SUSE-SU-2026:0345-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024093.html E-Mail link for SUSE-SU-2026:0417-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024089.html E-Mail link for SUSE-SU-2026:0421-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024126.html E-Mail link for SUSE-SU-2026:0449-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024272.html E-Mail link for SUSE-SU-2026:0559-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Tumbleweed freerdp freerdp-2.11.2-150600.4.6.1 freerdp-3.10.3-150700.3.3.1 freerdp-3.20.2-1.1 freerdp-devel freerdp-devel-2.1.2-12.52.1 freerdp-devel-2.11.2-150600.4.6.1 freerdp-devel-3.10.3-150700.3.3.1 freerdp-devel-3.20.2-1.1 freerdp-proxy freerdp-proxy-2.11.2-150600.4.6.1 freerdp-proxy-3.10.3-150700.3.3.1 freerdp-proxy-3.20.2-1.1 freerdp-proxy-plugins freerdp-proxy-plugins-3.10.3-150700.3.3.1 freerdp-proxy-plugins-3.20.2-1.1 freerdp-sdl freerdp-sdl-3.10.3-150700.3.3.1 freerdp-sdl-3.20.2-1.1 freerdp-server freerdp-server-2.11.2-150600.4.6.1 freerdp-server-3.10.3-150700.3.3.1 freerdp-server-3.20.2-1.1 freerdp-wayland freerdp-wayland-2.11.2-150600.4.6.1 freerdp-wayland-3.10.3-150700.3.3.1 freerdp-wayland-3.20.2-1.1 freerdp2-2.11.7-150700.3.3.1 freerdp2-2.11.7-4.1 freerdp2-devel-2.11.7-150700.3.3.1 freerdp2-devel-2.11.7-4.1 freerdp2-proxy-2.11.7-150700.3.3.1 freerdp2-proxy-2.11.7-4.1 freerdp2-server-2.11.7-150700.3.3.1 freerdp2-server-2.11.7-4.1 libfreerdp-server-proxy3-3 libfreerdp-server-proxy3-3-3.10.3-150700.3.3.1 libfreerdp-server-proxy3-3-3.20.2-1.1 libfreerdp2-2-2.11.2-150600.4.6.1 libfreerdp2-2-2.11.7-150700.3.3.1 libfreerdp2-2-2.11.7-4.1 libfreerdp2-2.4.0-150400.3.35.1 libfreerdp3-3 libfreerdp3-3-3.10.3-150700.3.3.1 libfreerdp3-3-3.20.2-1.1 librdtk0-0 librdtk0-0-3.10.3-150700.3.3.1 librdtk0-0-3.20.2-1.1 libuwac0-0 libuwac0-0-2.11.2-150600.4.6.1 libuwac0-0-3.10.3-150700.3.3.1 libuwac0-0-3.20.2-1.1 libwinpr2-2-2.11.2-150600.4.6.1 libwinpr2-2-2.11.7-150700.3.3.1 libwinpr2-2-2.11.7-4.1 libwinpr2-2.4.0-150400.3.35.1 libwinpr3-3 libwinpr3-3-3.10.3-150700.3.3.1 libwinpr3-3-3.20.2-1.1 rdtk0-devel-3.20.2-1.1 uwac0-0-devel-2.11.2-150600.4.6.1 uwac0-devel-3.20.2-1.1 winpr-devel winpr-devel-2.11.2-150600.4.6.1 winpr-devel-3.10.3-150700.3.3.1 winpr-devel-3.20.2-1.1 winpr2-devel-2.1.2-12.52.1 winpr2-devel-2.11.7-150700.3.3.1 winpr2-devel-2.11.7-4.1 freerdp-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-proxy-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-server-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-wayland-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libfreerdp2-2.4.0-150400.3.35.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libuwac0-0-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libwinpr2-2.4.0-150400.3.35.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 uwac0-0-devel-2.11.2-150600.4.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 winpr2-devel-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 freerdp-devel-2.1.2-12.52.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS winpr2-devel-2.1.2-12.52.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS freerdp-devel-2.1.2-12.52.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 winpr2-devel-2.1.2-12.52.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 freerdp-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-devel-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-proxy-plugins-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-sdl-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-server-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-devel-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-proxy-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp2-server-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp-server-proxy3-3-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp2-2-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libfreerdp3-3-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 librdtk0-0-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr2-2-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 libwinpr3-3-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr-devel-3.10.3-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 winpr2-devel-2.11.7-150700.3.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 freerdp-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 freerdp-devel-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 freerdp-proxy-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 freerdp-server-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 freerdp-wayland-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 libfreerdp2-2-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 libuwac0-0-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 libwinpr2-2-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 uwac0-0-devel-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 winpr-devel-2.11.2-150600.4.6.1 as a component of openSUSE Leap 15.6 freerdp-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-devel-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-proxy-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-proxy-plugins-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-sdl-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-server-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp-wayland-3.20.2-1.1 as a component of openSUSE Tumbleweed freerdp2-2.11.7-4.1 as a component of openSUSE Tumbleweed freerdp2-devel-2.11.7-4.1 as a component of openSUSE Tumbleweed freerdp2-proxy-2.11.7-4.1 as a component of openSUSE Tumbleweed freerdp2-server-2.11.7-4.1 as a component of openSUSE Tumbleweed libfreerdp-server-proxy3-3-3.20.2-1.1 as a component of openSUSE Tumbleweed libfreerdp2-2-2.11.7-4.1 as a component of openSUSE Tumbleweed libfreerdp3-3-3.20.2-1.1 as a component of openSUSE Tumbleweed librdtk0-0-3.20.2-1.1 as a component of openSUSE Tumbleweed libuwac0-0-3.20.2-1.1 as a component of openSUSE Tumbleweed libwinpr2-2-2.11.7-4.1 as a component of openSUSE Tumbleweed libwinpr3-3-3.20.2-1.1 as a component of openSUSE Tumbleweed rdtk0-devel-3.20.2-1.1 as a component of openSUSE Tumbleweed uwac0-devel-3.20.2-1.1 as a component of openSUSE Tumbleweed winpr-devel-3.20.2-1.1 as a component of openSUSE Tumbleweed winpr2-devel-2.11.7-4.1 as a component of openSUSE Tumbleweed freerdp as a component of SUSE Linux Enterprise Server 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server 16.0 freerdp-server as a component of SUSE Linux Enterprise Server 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server 16.0 winpr-devel as a component of SUSE Linux Enterprise Server 16.0 freerdp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-proxy-plugins as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-sdl as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-server as a component of SUSE Linux Enterprise Server for SAP applications 16.0 freerdp-wayland as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp-server-proxy3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libfreerdp3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 librdtk0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libuwac0-0 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 libwinpr3-3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 winpr-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap memory. This vulnerability is fixed in 3.20.1. CVE-2026-22854 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-devel-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-proxy-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-server-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:freerdp-wayland-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:libfreerdp2-2.4.0-150400.3.35.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:libuwac0-0-3.10.3-150700.3.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:libwinpr2-2.4.0-150400.3.35.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:uwac0-0-devel-2.11.2-150600.4.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:winpr2-devel-2.11.7-150700.3.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:freerdp-devel-2.1.2-12.52.1 SUSE Linux Enterprise Server 12 SP5-LTSS:winpr2-devel-2.1.2-12.52.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:freerdp-devel-2.1.2-12.52.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:winpr2-devel-2.1.2-12.52.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-devel-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-proxy-plugins-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-sdl-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp-server-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-devel-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-proxy-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:freerdp2-server-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp-server-proxy3-3-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp2-2-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libfreerdp3-3-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:librdtk0-0-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr2-2-2.11.7-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:libwinpr3-3-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:winpr-devel-3.10.3-150700.3.3.1 SUSE Linux Enterprise Workstation Extension 15 SP7:winpr2-devel-2.11.7-150700.3.3.1 openSUSE Leap 15.6:freerdp-2.11.2-150600.4.6.1 openSUSE Leap 15.6:freerdp-devel-2.11.2-150600.4.6.1 openSUSE Leap 15.6:freerdp-proxy-2.11.2-150600.4.6.1 openSUSE Leap 15.6:freerdp-server-2.11.2-150600.4.6.1 openSUSE Leap 15.6:freerdp-wayland-2.11.2-150600.4.6.1 openSUSE Leap 15.6:libfreerdp2-2-2.11.2-150600.4.6.1 openSUSE Leap 15.6:libuwac0-0-2.11.2-150600.4.6.1 openSUSE Leap 15.6:libwinpr2-2-2.11.2-150600.4.6.1 openSUSE Leap 15.6:uwac0-0-devel-2.11.2-150600.4.6.1 openSUSE Leap 15.6:winpr-devel-2.11.2-150600.4.6.1 openSUSE Tumbleweed:freerdp-3.20.2-1.1 openSUSE Tumbleweed:freerdp-devel-3.20.2-1.1 openSUSE Tumbleweed:freerdp-proxy-3.20.2-1.1 openSUSE Tumbleweed:freerdp-proxy-plugins-3.20.2-1.1 openSUSE Tumbleweed:freerdp-sdl-3.20.2-1.1 openSUSE Tumbleweed:freerdp-server-3.20.2-1.1 openSUSE Tumbleweed:freerdp-wayland-3.20.2-1.1 openSUSE Tumbleweed:freerdp2-2.11.7-4.1 openSUSE Tumbleweed:freerdp2-devel-2.11.7-4.1 openSUSE Tumbleweed:freerdp2-proxy-2.11.7-4.1 openSUSE Tumbleweed:freerdp2-server-2.11.7-4.1 openSUSE Tumbleweed:libfreerdp-server-proxy3-3-3.20.2-1.1 openSUSE Tumbleweed:libfreerdp2-2-2.11.7-4.1 openSUSE Tumbleweed:libfreerdp3-3-3.20.2-1.1 openSUSE Tumbleweed:librdtk0-0-3.20.2-1.1 openSUSE Tumbleweed:libuwac0-0-3.20.2-1.1 openSUSE Tumbleweed:libwinpr2-2-2.11.7-4.1 openSUSE Tumbleweed:libwinpr3-3-3.20.2-1.1 openSUSE Tumbleweed:rdtk0-devel-3.20.2-1.1 openSUSE Tumbleweed:uwac0-devel-3.20.2-1.1 openSUSE Tumbleweed:winpr-devel-3.20.2-1.1 openSUSE Tumbleweed:winpr2-devel-2.11.7-4.1 important 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H