THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-67302 (MEDIUM 4.3) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_streams_request() parses a server-controlled CAM_MEDIA_TYPE_DESCRIPTION from a StartStreamsRequest PDU but validates only F

[NVD] CVE-2026-67302 (MEDIUM 4.3) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_streams_request() parses a server-controlled CAM_MEDIA_TYPE_DESCRIPTION from a StartStreamsRequest PDU but validates only F

mednvdPublished 2026-08-01

CVE-2026-67302 CVSS: 4.3 MEDIUM Published: 2026-08-01T13:16:59.677

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_streams_request() parses a server-controlled CAM_MEDIA_TYPE_DESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not FrameRateDenominator. When a ma

Indicators of compromise

CVE-2026-67302cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67302