Nixpkgs security tracker

Untriaged

Permalink CVE-2026-27951

5.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): LOW

created 1 month, 3 weeks ago

FreeRDP has possible Integer overflow in Stream_EnsureCapacity

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCapacity` can create an endless blocking loop. This may affect all client and server implementations using `FreeRDP`. For practical exploitation this will only work on 32bit systems where the available physical memory is `>= SIZE_MAX`. Version 3.23.0 contains a patch. No known workarounds are available.

References

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qcfc-ghxr-h927 x_refsource_CONFIRM
https://github.com/FreeRDP/FreeRDP/commit/118afc0b954ba9d5632b7836ad24e454555ed113 x_refsource_MISC

Affected products

FreeRDP

==< 3.23.0

Matching in nixpkgs

pkgs.freerdp

Remote Desktop Protocol Client

nixos-unstable 3.22.0
- nixpkgs-unstable 3.22.0
- nixos-unstable-small 3.22.0
nixos-25.11 3.22.0
- nixos-25.11-small 3.22.0
- nixpkgs-25.11-darwin 3.22.0

Package maintainers

@peterhoeg Peter Hoeg <peter@hoeg.com>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.freerdp

Package maintainers