Количество 3
Количество 3
CVE-2026-66401
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service.
CVE-2026-66401
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerabilit ...
GHSA-j96g-x36f-4cg4
FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-66401 FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service. | CVSS3: 2.1 | 0% Низкий | 3 дня назад |
| CVE-2026-66401 FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerabilit ... | CVSS3: 2.1 | 0% Низкий | 3 дня назад |
| GHSA-j96g-x36f-4cg4 FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera stream setup, causing denial of service. | CVSS3: 2.1 | 0% Низкий | 2 дня назад |
Уязвимостей на страницу