4 matches found
CVE-2026-121403
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICEIOREQUEST with a truncated IRPMJCREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting...
CVE-2026-121403
FreeRDP versions before 3.32.2 are vulnerable to a denial of service (DoS) condition. The root cause is a malformed drive DEVICE_IOREQUEST featuring a truncated IRP_MJ_CREATE body, which silently terminates the drive worker. A malicious RDP server can exploit this by sending the malformed IRP and...
EUVD-2026-115935
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICEIOREQUEST with a truncated IRPMJCREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting...
CVE-2026-121403: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a…
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICEIOREQUEST with a truncated IRPMJCREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting...