FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body…
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting memory and causing session availability loss.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- FreeRDP
- Product
- FreeRDP
- CVSS v3.1
- 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- Weakness
- CWE-770
- Exposure class
- Remote access
- NVD status
- Analyzed
Why it ranks 36 (Notable)
- CVSS v3.1 4.3 medium
- Exposed product class: remote access
- Widely deployed vendor product (FreeRDP)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- Vendor advisory (github.com)
- CVE-2026-121403 on this site · NVD · CVE.org · Vulnpedia