CVE-2026-67296

Received Received - Intake

Denial of Service in FreeRDP via RDPEI Message Handling

Publication date: 2026-08-01

Last updated on: 2026-08-03

Assigner: VulnCheck

Description

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-01

Last Modified

2026-08-03

Generated

2026-08-21

AI Q&A

2026-08-01

EPSS Evaluated

2026-08-20

NVD

CVE-2026-67296

EUVD

EUVD-2026-51844

Affected Vendors & Products

Vendor	Product	Version / Range
freerdp	freerdp	to 3.29.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

FreeRDP before version 3.29.0 has a denial of service vulnerability in the RDPEI server channel handler. It fails to validate the maximum PDU body length before allocating memory. A malicious RDP client can exploit this by sending a header-only RDPEI message with a large declared body length, causing the server to allocate excessive memory and crash.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual memory allocation patterns or unexpected RDPEI messages. Check FreeRDP logs for excessive memory usage or crashes. Use network monitoring tools like Wireshark to inspect RDP traffic for malformed RDPEI messages with large declared body lengths. No specific commands are provided in the context.

Impact Analysis

This vulnerability can cause a denial of service by crashing the FreeRDP server, leading to service unavailability. If you rely on FreeRDP for remote desktop access, this could disrupt your operations and require server restarts to restore functionality.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling denial of service attacks that disrupt service availability. GDPR requires maintaining service availability for data subjects, while HIPAA mandates ensuring access to health information systems. A successful DoS attack may violate these requirements.

Mitigation Strategies

Upgrade FreeRDP to version 3.29.0 or later to address the denial of service vulnerability in the RDPEI server channel handler.

Hi! I’m here to help you understand CVE-2026-67296. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70