CVE-2026-91952

Katalog CVE

CVSS 6.5 · Medium EPSS 0,39%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada freerdp. Skor CVSS 3.1 6.5 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode path to loop indefinitely, consuming CPU and preventing normal client operation.

Rincian

Terbit di NVD

15 September 2026

Terakhir diubah

24 September 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m85m-3qxv-63h5 exploit · mitigasi · advisory vendor
• https://www.vulncheck.com/advisories/freerdp-before-3.31.0-denial-of-service-via-pool-decode-rect advisory pihak ketiga