CVE-2026-66401: Freerdp

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service.

Affected products

• Freerdp Freerdp: before 3.29.0 (fixed in 3.29.0)

Published 2026-08-01. Last modified 2026-09-03.