Threats tagged 'ghsa-whpf-5r86-wm9v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-121403FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a Medium5.32026-11-03GCVE DatabaseCVE-2026-121403 FreeRDP versions before 3.32.2 have a denial of service vulnerability triggered by a malformed drive DEVICE_IOREQUEST containing a truncated IRP_MJ_CREATE body. This causes the drive worker to silently stop, allowing a malicious RDP server to send further requests that accumulate in the IrpQueue, exhausting memory and causing session availability loss. Report on CVE-2026-121403 Vulnerability CWE-770 #ghsa-whpf-5r86-wm9v	GCVE Database	2026-11-03

Page 1 of 1