Bug 2510002 (CVE-2026-66401) - CVE-2026-66401 FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in UVC H.264 parser
Summary: CVE-2026-66401 FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in ...
Keywords:
Status: NEW
Alias: CVE-2026-66401
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2510279 2510280 2510283 2510284
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-01 13:02 UTC by OSIDB Bzimport
Modified: 2026-08-03 07:45 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-01 13:02:43 UTC 
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service.
Note You need to log in before you can comment on or make changes to this bug.