CVE-2026-110831

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.13.0 through 3.31.0

Description A resource retention flaw exists in the drive process irp create() function. The issue occurs when an opened local file is registered in the drive dictionary before the allocation size is applied; if the allocation operation fails, the file is not removed. A malicious RDP server can exploit this by sending an IRP MJ CREATE request with the AllocationSize variable set to UINT64 MAX, causing the seek operation to fail and resulting in a leak of the file object and operating-system handle until the drive is torn down.

Recommendations Update FreeRDP to version 3.32.0 or later.