CVE-2026-111378

The FreeRDP software, versions 3.0.0 before 3.32.0 , contains an uncontrolled resource consumption vulnerability within the parse_nla_mode_pdu function. An unauthenticated attacker can trigger this by completing a TLS handshake and streaming bytes that do not begin with the DER SEQUENCE tag 0x30 ...