CVE-2026-111374Medium· 5.3▾ SunlitFreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized dimensi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized dimensions to force large pending-sample allocations and reconfigure the local camera through the HAL.
FreeRDP >= 3.30.0 < 3.32.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-67296High· 7.5FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation
CVE-2026-111377Medium· 6.5FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
CVE-2026-111376Medium· 5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE
CVE-2026-111373Medium· 5.3FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping
CVE-2026-111379High· 7.3FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3
CVE-2026-111378High· 7.5FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser