CVE-2026-91961

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a Universal Serial Bus USB Redirection for Remote Desktop Connection URBDRC control-transfer request with an invalid OutputBufferSize. This can trigger an assertion in the client process, leading to a denial of...

CVE-2026-91961

FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb backend. A malicious RDP server can send a control-transfer request with OutputBufferSize set to 65536, triggering a...

EUVD-2026-78637

FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb backend. A malicious RDP server can send a control-transfer request with OutputBufferSize set to 65536, triggering a...