CVE-2026-41210

The Moonlight Qt GameStream client (versions 6.1.0 and earlier ) is vulnerable to a remote heap buffer overflow . When a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL if Moonlight selects a decoder path lacking CAPABILITY_REFERENCE_FRAME_INVAL...