CVE-2026-121389

FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdrdumppacket that allows malicious RDP servers to abort clients by sending malformed RDPDR device-list announcements. Attackers can declare a DeviceDataLength exceeding the received packet, triggering a fatal...

CVE-2026-121389 FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging

FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdrdumppacket that allows malicious RDP servers to abort clients by sending malformed RDPDR device-list announcements. Attackers can declare a DeviceDataLength exceeding the received packet, triggering a fatal...

EUVD-2026-115921

FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdrdumppacket that allows malicious RDP servers to abort clients by sending malformed RDPDR device-list announcements. Attackers can declare a DeviceDataLength exceeding the received packet, triggering a fatal...

CVE-2026-121389

FreeRDP versions 3.27.0 before 3.32.2 are vulnerable to a denial of service (DoS) flaw in the rdpdr_dump_packet function. A malicious RDP server can cause a client to abort by sending malformed RDPDR device-list announcements where the DeviceDataLength exceeds the received packet size. This trigg...