PT-2026-67270

CVE-2026-67290

Published

2026-07-07

Updated

2026-09-29

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0

Description A heap out-of-bounds read occurs in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types that have insufficient ExtraData. A remote attacker can trigger a crash by sending malformed media format data from a server, which causes the system to read fixed offsets without validating the source buffer length.

Recommendations Update to version 3.29.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2026-67290