CVE-2026-109947

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-109947
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109947.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-109947
Aliases
  • GHSA-q56j-jjh6-38jf
Downstream
Published
2026-10-13T13:27:14Z
Modified
2026-10-15T02:47:22Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
Details

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRP_MJ_READ with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on 64-bit builds or an under-reserved buffer on 32-bit builds.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-770"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109947.json"
}
References

Affected packages

Git / github.com/freerdp/freerdp

Affected ranges

Type
GIT
Repo
https://github.com/freerdp/freerdp
Events
Introduced
7418bc7b7c880a87edade60282f6aeeacd640e47
Fixed
d27a4f7c1c63b62a5e60e5d939ad116cfb58ffc1
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "3.20.1"
        },
        {
            "fixed":  "3.32.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109947.json"