Bug 2565938 (CVE-2026-121403) - CVE-2026-121403 freerdp: FreeRDP: Denial of Service via malformed drive redirection request
Summary: CVE-2026-121403 freerdp: FreeRDP: Denial of Service via malformed drive redir...
Keywords:
Status: NEW
Alias: CVE-2026-121403
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2566783 2566784
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-03 16:37 UTC by OSIDB Bzimport
Modified: 2026-11-04 09:37 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-03 16:37:04 UTC 
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting memory and causing session availability loss.
Note You need to log in before you can comment on or make changes to this bug.