THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-67303 (MEDIUM 4.3) — FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/serial_main.c. When serial device redirection is enabled and a server-controlled IRP_MJ_DEVICE_CONTROL request

[NVD] CVE-2026-67303 (MEDIUM 4.3) — FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/serial_main.c. When serial device redirection is enabled and a server-controlled IRP_MJ_DEVICE_CONTROL request

mednvdPublished 2026-08-01

CVE-2026-67303 CVSS: 4.3 MEDIUM Published: 2026-08-01T13:16:59.833

FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/serial_main.c. When serial device redirection is enabled and a server-controlled IRP_MJ_DEVICE_CONTROL request specifies an unsupported IOCTL with a non-zero Outp

Indicators of compromise

CVE-2026-67303cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67303