PT-2026-2939 · Freerdp+3 · Freerdp+3
Ehdgks0627
·
Published
2026-01-01
·
Updated
2026-04-06
·
CVE-2026-22859
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 3.20.1
Description
FreeRDP, a free implementation of the Remote Desktop Protocol, contains a flaw where the URBDRC client does not validate server-provided MSUSB INTERFACE DESCRIPTOR values. This lack of bounds checking leads to an out-of-bounds read when these values are used as indices in the
libusb udev complete msconfig setup function. The issue occurs because the server can supply values that exceed the allocated buffer size, resulting in a read outside the intended memory region.Recommendations
Update to version 3.20.1 or later.
Exploit
Fix
DoS
Improper Validation of Array Index
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freerdp
Linuxmint
Rocky Linux
Ubuntu