Resource Retention Flaw in FreeRDP Affects Drive Redirection Functionality

CVE-2026-110831

What is CVE-2026-110831?

FreeRDP versions from 3.13.0 to 3.32.0 exhibit a vulnerability involving resource retention in the drive_process_irp_create function. This flaw allows a malicious RDP server with drive redirection enabled to exploit the system by sending an IRP_MJ_CREATE command with an excessively large AllocationSize. Consequently, the seek operation fails, resulting in a leak of file objects and operating system handles that remain allocated until the drive teardown occurs. This resource leak could have significant implications for users, particularly in environments where RDP access is extensively utilized.

References