Uncontrolled Resource Allocation Vulnerability in FreeRDP by FreeRDP

CVE-2026-109947

What is CVE-2026-109947?

FreeRDP versions prior to 3.32.0 are susceptible to an uncontrolled resource allocation vulnerability. This flaw allows attackers to exploit malicious RDP servers, which can send oversized drive redirection read requests. Specifically, by issuing an IRP_MJ_READ command with a Length of 0xffffffff, an attacker can trigger significant memory allocation—approximately 4 GiB of zeroed memory on 64-bit systems, or an under-reserved buffer on 32-bit systems. As a result, attackers can potentially exhaust client memory resources, leading to performance degradation or system instability.

References