CVE-2026-67302

A flaw was found in FreeRDP, a remote desktop protocol client. A malicious or compromised RDP server can exploit this vulnerability by sending a specially crafted StartStreamsRequest with a zero value for FrameRateDenominator. If camera redirection is enabled on the client, this action triggers a divide-by-zero error, causing the FreeRDP client process to terminate and resulting in a denial of service for the user.

This vulnerability in FreeRDP affects clients with camera redirection enabled. A malicious RDP server could send a crafted StartStreamsRequest PDU, leading to a divide-by-zero error and client process termination, resulting in a denial of service. Exploitation requires user interaction to connect to a compromised server with the vulnerable feature active.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable camera redirection when connecting to untrusted RDP servers. This can be achieved by using the --disable-camera option with the xfreerdp client or by configuring FreeRDP to not enable camera redirection. Disabling this feature will prevent the use of camera redirection functionality.