CVE-2026-110830

FreeRDP before 3.32.0 fails to close prior serial handles in serial process irp create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP MJ CREATE requests to accumulate descriptors and terminate the client at the CommReadFile FD SETSIZE assertion.