CVE-2026-111374: FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized dimensions to force large pending-sample allocations and reconfigure the local camera through the HAL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.0+dfsg-0ubuntu0.24.04.1 - Upgrade
Upgrade
ubuntu/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.0+dfsg-0ubuntu0.26.04.1 - Upgrade
Upgrade
FreeRDPto a version that resolves this vulnerability.Fixed in 3.32.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
FreeRDP rdpecam clients running versions from 3.30.0 before 3.32.0 are exposed when they connect to a malicious RDP server.
What must an attacker do to trigger the resource exhaustion?
The attacker must operate or control an RDP server and send a StartStreamsRequest that requests unadvertised camera media types with oversized dimensions. This causes large pending-sample allocations and camera reconfiguration through the local HAL.
What is the practical impact?
The reported impact is resource exhaustion, resulting in an availability impact on the affected client. The supplied vector indicates network reachability, low privileges, no user interaction, high attack complexity, and no confidentiality or integrity impact.