This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-121959 | BDVDB-2026-400378 Detail

FreeRDPFreeRDP

Description#

FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS close_notify, causing a client thread to spin and consume CPU until killed.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.