CVE-2026-121403

FreeRDP versions before 3.32.2 are vulnerable to a denial of service (DoS) condition. The root cause is a malformed drive DEVICE_IOREQUEST featuring a truncated IRP_MJ_CREATE body, which silently terminates the drive worker. A malicious RDP server can exploit this by sending the malformed IRP and...