CVE-2026-67290High· 7.5▾ TwilightFreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to t…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating source buffer length.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89629Medium· 5.5kernel: HID: corsair-void: Check size of status and firmware events before reading them (CVE-2026-89629)
CVE-2026-59189High· 7.1OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry
CVE-2026-59981High· 7.1OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry
CVE-2026-73073High· 7.3Vim is an open source, command line text editor
CVE-2026-92925High· 7.1A flaw was found in Redis community
CVE-2026-85234High· 7.5A flaw was found in tftp-hpa