CVE-2026-110836GHSA-h7fx-22wv-4cg8

FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type

FreeRDP FreeRDP

CVSS

7.1High

ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 20 Oct 2026. Not in the KEV catalogCISA via CVE List

Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 16% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed in3.32.0Fixed versionCVE List

Published14 Oct 2026Updated 20 Oct 2026CVE List

What fixes it

3.32.0FreeRDPCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-110836 FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type headersTelegram: CVE Notify, 23 Oct 2026

Description

FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized Content-Type, pinning a client thread at full CPU indefinitely.

Text from CVE List

Affected versions 2

FreeRDPaffected: 3.0.0 before 3.32.0CVE List
FreeRDPunaffected: 3.32.0CVE List