← CVE Intelligence

CVE-2026-22859

FreeRDP has a heap-buffer-overflow in urb_select_configuration PUBLISHED

Description (CNA)

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read. This vulnerability is fixed in 3.20.1.

Affected (CNA)

Vendor / productVersions
FreeRDP / FreeRDPaffected < 3.20.1

CWE

CWE-125, CWE-129

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A heap based buffer overflow has been discovered in FreeRDP. In affected versions the URBDRC client does not perform bounds checking on server‑supplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices in libusb_udev_complete_msconfig_setup, causing an out‑of‑bounds read.