Medium severity6.5NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026
CVE-2026-121400
CVE-2026-121400
Description
FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious RD Gateway to exhaust client CPU by sending an incomplete keepalive control packet. Attackers completing the RDG tunnel-open exchange then send an eight-byte header with packetLength 0xFFFF and withhold the body, causing an unbounded no-progress read loop that spins one client thread at full CPU.
Affected products
1Patches
Vulnerability mechanics
References
2- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4x6-2hrm-hvq9nvdVendor Advisory
- www.vulncheck.com/advisories/freerdp-before-3.32.2-cpu-exhaustion-via-rdg-control-packetnvdThird Party Advisory
News mentions
0No linked articles in our index yet.