Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0028

NIXPKGS-2026-0028
published on 18 Jan 2026
updated 4 days, 9 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed maintainer @peterhoeg
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
FreeRDP has a heap-buffer-overflow in drive_process_irp_read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap memory. This vulnerability is fixed in 3.20.1.

Affected products

FreeRDP
  • ==< 3.20.1

Matching in nixpkgs