Live › vulnerability › CVE-2026-121403
FreeRDP, a remote desktop client library, silently stops its drive worker when it receives a malformed drive I/O request with a truncated create body. A malicious RDP server can then keep sending requests that pile up in memory until the session fails.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Anyone running a FreeRDP client with drive redirection connected to an RDP server they do not fully trust. The sources describe a malicious server as the trigger, so clients that only connect to trusted, internal servers carry less risk. unknown for whether drive redirection must be enabled.
No product ranges from the sources yet.
xfreerdp --version) and compare it to the fixed release in the fix field.3.32.2: move to 3.32.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting memory and causing session availability loss.
This page as .md · .json · in your agent: get_signal("CVE-2026-121403")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.