CVE-2026-121403
Analyzed Analyzed - Analysis Complete

FreeRDP Denial of Service via Malformed Drive Request

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: VulnCheck

Description
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting memory and causing session availability loss.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-121403
EUVD
EUVD-2026-115935

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freerdp freerdp to 3.32.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

FreeRDP before version 3.32.2 has a denial of service vulnerability. A malicious RDP server can send a malformed drive request that causes the drive worker to crash silently. This leads to memory exhaustion as further requests accumulate without bound, resulting in session unavailability.

Impact Analysis

If you use FreeRDP versions before 3.32.2, a malicious RDP server could crash your client session by exploiting this flaw. This would disrupt your remote desktop connection and potentially make it unavailable until restarted.

Mitigation Strategies

Update FreeRDP to version 3.32.2 or later to address the denial of service vulnerability. Monitor network traffic for malformed drive DEVICE_IOREQUEST packets from RDP servers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121403. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...