CVE-2026-121405

FreeRDP versions before 3.32.2 are vulnerable to a memory exhaustion issue within the serial RDPDR device control. The root cause is a failure to cap the OutputBufferLength in serial device-control IRP requests. A malicious server using serial redirection can trigger excessive memory allocation o...

CVE-2026-121405 FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...