Out-of-Bounds Heap Read Vulnerability in FreeRDP by FreeRDP

CVE-2026-66401

What is CVE-2026-66401?

FreeRDP, prior to version 3.29.0, is susceptible to an out-of-bounds heap read due to a flaw in the UVC H.264 extension-unit parser. The vulnerability arises when the system does not properly validate the descriptor length before accessing the GUID field. This oversight allows a local attacker to exploit the issue with a malicious USB video camera during the camera stream setup, potentially leading to a denial of service.

References