REDHAT-BUG-2510029: Medium severity FreeRDP freerdp vulnerability

Q: Which systems are exposed to this denial-of-service issue?

FreeRDP servers using the RDPEI server channel handler are exposed if they run a version before 3.29.0 and accept connections from malicious RDP clients.

Q: What does an attacker need to exploit the issue?

An attacker needs to act as an RDP client and send a header-only RDPEI message with a large declared body length. The malformed length can cause the server to attempt excessive memory allocation.

Q: What can be done if upgrading is not immediately possible?

Limit access to affected FreeRDP servers so untrusted or malicious RDP clients cannot connect. The issue is triggered through the RDPEI server channel handler.

Published Aug 1, 2026

Updated

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.

Affected Software

1 affected component

FreeRDP freerdp<3.29.0

Event History

Aug 1, 2026

Data Sourced

via Red Hat·01:04 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this denial-of-service issue?

FreeRDP servers using the RDPEI server channel handler are exposed if they run a version before 3.29.0 and accept connections from malicious RDP clients.

What does an attacker need to exploit the issue?

An attacker needs to act as an RDP client and send a header-only RDPEI message with a large declared body length. The malformed length can cause the server to attempt excessive memory allocation.

What can be done if upgrading is not immediately possible?

Limit access to affected FreeRDP servers so untrusted or malicious RDP clients cannot connect. The issue is triggered through the RDPEI server channel handler.

REDHAT-BUG-2510029: Medium severity FreeRDP freerdp vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this denial-of-service issue?

What does an attacker need to exploit the issue?

What can be done if upgrading is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this denial-of-service issue?

What does an attacker need to exploit the issue?

What can be done if upgrading is not immediately possible?