DEBIAN-CVE-2026-121403: Medium severity debian/freerdp2 vulnerability
FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICEIOREQUEST with a truncated IRPMJCREATE body silently kills the drive worker. A malicious RDP server can send such an IRP then post further requests that accumulate unbounded in the IrpQueue, exhausting memory and causing session availability loss.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Clients using affected FreeRDP versions are exposed when they connect to a malicious RDP server that can send crafted drive redirection requests. The affected Debian package families listed are freerdp3 and freerdp2.
What does an attacker need to exploit it?
An attacker needs to operate or control an RDP server that the client connects to. Exploitation requires user interaction because a user must initiate the RDP session.
What is the impact of successful exploitation?
The malformed request kills the drive worker, while later requests accumulate without bound in the IRP queue. This can exhaust memory and cause loss of availability for the RDP session.