CVE-2026-121404

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that...

CVE-2026-121404 FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that...

CVE-2026-121404

FreeRDP versions before 3.32.2 are vulnerable to a denial of service (DoS) vulnerability in the shadow server . The issue arises because the FreeRDP_WTSVirtualChannelRead function fails to consume zero-length drdynvc DATA PDUs sent on opened audin or rdpgfx channels. Consequently, an authenticate...

EUVD-2026-115936

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that...

CVE-2026-121404: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP…

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that...