CVE-2026-111377CWE-400denial-of-service

CVE-2026-111377

Medium · published October 16, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00269 · 18.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-10-16T07:18Z
Affected products (1)
ProductVersionsFixed in
freerdp/freerdp≥ 2.0.0, < 3.32.03.32.0
References (2)
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw · [email protected]https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-memory-exhaustion-via-static-channel-reassembly · [email protected]
EPSS history
Timeline
  • 17 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 16 OCT 01:17Z
    FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
    cvelistv5
  • 16 OCT 01:17Z
    FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
    cvelistv5