Skip to content

CVE record · 1 source

CVE-2026-121405

CVSS 4.3

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive…

Vendor: FreeRDP
Product: FreeRDP
CVSS v3.1: 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness: CWE-770

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

18

CVE NVD 4h ago

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive…

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an…

CVSS 4.3 CVE-2026-121405 FreeRDP