CVE-2026-110834

Undergoing Analysis Undergoing Analysis - In Progress

Null Pointer Dereference in FreeRDP via Malicious RDP Servers

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRP_MJ_READ or IRP_MJ_WRITE before create or after close, causing CommReadFile or CommWriteFile to dereference a null handle and terminate clients using Linux serial redirection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110834

EUVD

EUVD-2026-101717

Affected Vendors & Products

Vendor	Product	Version / Range
FreeRDP	FreeRDP	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

FreeRDP versions from 2.0.0 to 3.32.0 have a null pointer dereference flaw. Malicious RDP servers can exploit this by sending invalid serial IRPs (I/O Request Packets) like IRP_MJ_READ or IRP_MJ_WRITE before a file handle is created or after it is closed. This causes the client to dereference a null handle in CommReadFile or CommWriteFile, crashing the application.

Detection Guidance

Detecting this vulnerability requires monitoring for FreeRDP clients receiving malformed IRP commands from RDP servers. Check FreeRDP logs for crashes or null pointer dereference errors during serial redirection sessions. Use network monitoring tools to inspect RDP traffic for premature IRP_MJ_READ or IRP_MJ_WRITE commands before session establishment or after termination.

Impact Analysis

If you use FreeRDP with Linux serial redirection, an attacker controlling the RDP server could crash your client application. This leads to denial of service, disrupting your remote desktop sessions. No data theft or code execution is implied by the vulnerability description.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to client crashes via malicious RDP servers. However, if exploited in a healthcare or data processing environment, it could lead to service disruptions that may impact availability requirements under these regulations.

Mitigation Strategies

Upgrade FreeRDP to version 3.32.0 or later to address the null pointer dereference issue. Disable Linux serial redirection in RDP client configurations if not required. Monitor RDP server connections for suspicious activity targeting serial devices. Apply network-level controls to block malformed RDP packets.

Hi! I’m here to help you understand CVE-2026-110834. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70