PT-2026-111536 · Freerdp+1 · Freerdp
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions 2.3.0 through 3.31.0
Description
An infinite loop exists in the
http chuncked read() function. A malicious RD Gateway can cause clients to hang by sending incomplete chunked responses, such as a partial chunk-size line or footer, followed by a clean TLS shutdown. This sequence results in zero-byte reads that loop indefinitely, freezing the client decoder thread.Recommendations
Update FreeRDP to version 3.32.0 or later.
Exploit
Fix
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp