4 matches found
EUVD-2026-101719
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in httpresponserecv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...
CVE-2026-110836
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in httpresponserecv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...
CVE-2026-110836 FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in httpresponserecv that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized...
CVE-2026-110836
FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to an infinite loop DoS in the http_response_recv() function. A malicious gateway can exhaust client CPU by returning a nonzero Content-Length paired with an unrecognized Content-Type containing a semicolon. This vulnerability pins a client thre...