What is GHSA-f3vp-w46f-jr9h?

GHSA-f3vp-w46f-jr9h is a security advisory published by GitHub Security Advisories with Medium severity. FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests,...

Which CVE IDs does GHSA-f3vp-w46f-jr9h cover?

GHSA-f3vp-w46f-jr9h covers the following CVE IDs: CVE-2026-121405. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f3vp-w46f-jr9h?

GHSA-f3vp-w46f-jr9h has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-f3vp-w46f-jr9hMediumCVSS 4.3

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests,...

Vendor

GitHub Security Advisories

Published

November 3, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-121405 →

📋 Description

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRP_MJ_DEVICE_CONTROL request with IOCTL_USBPRINT_GET_1284_ID and a near-maximum length to exhaust client memory.

🔗 References (4)

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r387-jjq3-87hv
https://nvd.nist.gov/vuln/detail/CVE-2026-121405
https://www.vulncheck.com/advisories/freerdp-before-3.32.2-memory-exhaustion-via-serial-rdpdr-device-control
https://github.com/advisories/GHSA-f3vp-w46f-jr9h