CVE-2026-121412 FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap memory via intercepted DVC message reassembly. Attackers can declare a large DATAFIRST length and keep sending fragments without completing the message...

CVE-2026-121412

FreeRDP versions 3.0.0 before 3.32.2 is affected by a proxy memory exhaustion vulnerability (CWE-770) during DVC message reassembly . An attacker can declare a large DATA_FIRST length and transmit continuous fragments without completing the message, causing the proxy to retain heap memory proport...