What is CVE-2026-91952?

CVE-2026-91952 is a medium-severity vulnerability in Freerdp, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 6.5/10. Published 2026-09-15.

How severe is CVE-2026-91952?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Freerdp

CVE-2026-91952

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode path to loop indefinitely, consuming CPU and preventing normal client operation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Freerdp

Weakness classification (CWE)

CWE-835 — Loop with Unreachable Exit Condition (Infinite Loop)

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-91952?: CVE-2026-91952 is a medium-severity vulnerability in Freerdp, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 6.5/10. Published 2026-09-15.
How severe is CVE-2026-91952?: Medium severity. CVSS v3 base score is 6.5 out of 10.