PT-2026-111542 · Freerdp+1 · Freerdp
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions 3.20.1 through 3.31.0
Description
An uncontrolled resource allocation issue exists where malicious RDP servers can exhaust client memory through oversized drive redirection read requests. This occurs when an attacker sends an
IRP MJ READ request with the Length variable set to 0xffffffff, resulting in approximately 4 GiB of zeroed allocation on 64-bit builds or an under-reserved buffer on 32-bit builds.Recommendations
Update FreeRDP to version 3.32.0.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freerdp