Live › vulnerability › CVE-2026-111374
Go to dashboardFreeRDP's rdpecam client, from 3.30.0 before 3.32.0, accepts camera media types that were never advertised and oversized StartStreamsRequest dimensions from an RDP server. A malicious server can force large memory allocations on the client and reconfigure the local camera through the HAL.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only FreeRDP clients from 3.30.0 up to but not including 3.32.0 that connect to RDP servers are exposed, and the attack needs a malicious server. Clients that connect only to trusted servers, or that do not use camera redirection, are lower risk; the sources do not state whether camera redirection is off by default.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| freerdp | vendor | >= 3.30.0, < 3.32.0 | 3.32.0 |
xfreerdp --version or freerdp --version, and treat versions from 3.30.0 up to but not including 3.32.0 as exposed.3.32.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized dimensions to force large pending-sample allocations and reconfigure the local camera through the HAL.
This page as .md · .json · in your agent: get_signal("CVE-2026-111374")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.