CVE-2026-111378CWE-400denial-of-service

CVE-2026-111378

High · published October 16, 2026

CVSS v3.1

7.5

EPSS

Percentile

27.0

In the wild

Unconfirmed

What it is

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffer growth before NLA authentication.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS: 0.00346 · 27.0th percentile
Weakness: CWE-400 · Uncontrolled Resource Consumption
Published: 2026-10-16T07:18Z

Affected products (1)

Product	Versions	Fixed in
freerdp/freerdp	≥ 3.0.0, < 3.32.0	3.32.0

References (3)

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x · [email protected]https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-unauthenticated-memory-exhaustion-via-nla-frame-parser · [email protected]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

17 OCT 03:28Z
EPSS moved — → 0%
epss
16 OCT 01:17Z
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
cvelistv5
16 OCT 01:17Z
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
cvelistv5