FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffer growth before NLA authentication.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x Exploit, Mitigation, Vendor Advisory
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x Exploit, Mitigation, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-20 15:34
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-20 15:34
- StatusAwaiting Analysis → Undergoing AnalysisNVD modified 2026-10-16 17:17
- StatusReceived → Awaiting AnalysisNVD modified 2026-10-16 14:52
- First seenCVSS 8.7NVD modified 2026-10-16 03:18
Affected (CPE criteria) 1
cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*
References 3
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x Exploit, Mitigation, Vendor Advisory
- https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-unauthenticated-memory-exhaustion-via-nla-frame-parser Third Party Advisory
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x Exploit, Mitigation, Vendor Advisory