Wind River Support Network

HomeDefectsLIN1025-25581

Acknowledged

LIN1025-25581 : Security Advisory - freerdp - CVE-2026-91961

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb backend. A malicious RDP server can send a control-transfer request with OutputBufferSize set to 65536, triggering a reachable assertion that terminates the client process.
Data source: VulnCheck (disclosure@vulncheck.com)